RE: Detection tool?

["Keenan Smith" <kc_smith () clark net>]

You could turn on auditing or logging of whatever resources are used to
manage the passwords.

A scan of the resulting logs looking for a large number of attempts in a
short period from a single source would give you a basic idea that
something happened.  

Or are you looking for an alarm of some sort that notifies you in real
time?

KC Smith

-----Original Message-----
From: David E. Newberger [mailto:dnewberger () cdatribe-nsn gov] 
Sent: Wednesday, March 31, 2004 4:02 PM
To: security-basics () lists securityfocus com
Subject: Detection tool?


How can someone detect a password cracking tool on a network?

David Newberger

------------------------------------------------------------------------
---
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545
off 
any course! All of our class sizes are guaranteed to be 10 students or
less 
to facilitate one-on-one interaction with one of our expert instructors.

Attend a course taught by an expert instructor with years of
in-the-field 
pen testing experience in our state of the art hacking lab. Master the
skills 
of an Ethical Hacker to better assess the security of your organization.

Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------