RE: Operative System Updates

["Morey, Adam" <adam.morey () nist gov>]

Try Open Source Tripwire for Lnx, it's designed to baseline your file system, should work fine for system update/change 
management.

For Windows try an MSI builder, you can monitor registry and file system modifications, no need for long analysis.  You 
can create a new MSI package immediately after the update is completed, then inspect the resultant file, the builder 
will have an editor to open MSI package to edit them - it's designed to work between reboots too which is essential.  
It's a manual process, but very simple with just one software tool, which works best when installed on a remote server 
and run from a share - run the builder to scan the system, patch/reboot/patch, run the builder and scan again to create 
the msi, open the msi to review all file, registry, ddl registration, txt file content changes.....  There is a free 
one in the Tools dir on the Windows2003 CD (WinInstall LE), there are several free starter packages out there as well.  

adam




-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of haZard0us
Sent: Thursday, June 14, 2012 1:46 PM
To: security-basics () securityfocus com
Subject: Operative System Updates

Hi all,

I need to create a script that gathers information of the OS before and after the updates in order to detect changes 
and which updates/service packs were used.

To be honest, I really don't know where to start. So, my question is which information should i gather in order to 
detect correctly which files were changed and which updates were used.

Thanks in advance.

--haZ
------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and 
who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell 
if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your 
Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing 
management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------