Re: Second-Line defense on Windows NT

[Pauline van Winsen - Uniq Professional Services <Pauline.van.Winsen () uniq com au>]

> > One possibility I see, is to implement on possible vulnerable hosts
> > (including the firewall) a small tool that permanently checks the integrity
> > of that host and the access to system resources. This tool should be able
> > to send some kind of real-time alert to administrators/operators when
> > something non-predifined happens on the host and perhaps it should be able
> > to take countermeasures like disabling the external network connection.
> > I'm pretty confident that this kind of tool exists on UNIX platforms,
> > although I can not remember some names I've heard, but at present I'm
> > looking for such a tool for a Windows NT host (commercial or shareware).
> > Can someone help me?
>
> You are probably thinking of tripwire, run from 'cron'.  But I don't
> know whether it (or anything else) does the same thing on MSW-NT.

i know of a uni. research group developing a tripwire like tool for NT.
if there's interest i'll find out when/how/if it will become
available.

cheers,
pauline

Pauline van Winsen                                   pauline () uniq com au
Uniq Professional Services Pty Ltd                       www.uniq.com.au
PO Box 70, Paddington, NSW 2021,                      (Sydney) Australia
Phone: +61-2-9380-6360      Fax: +61-2-9380-6416      Pager: 016 287 000
"It is not far fetched to say that a woman's cooking is often an 
expression of her love, and it's a wise woman who masters the art early. 
You can be sure he will expect you to cook as well as "Mum"."
          Way to a Man's heart - Introduction, Woman's World, circa 1964.