RE: free hIDS, or system assessment tools

["Fahad Al-Suwais" <suwaisfa () alrajhibank com sa>]

What I need is a system vulnerability scanner, and it have some policies
to compare the compliance with it.

For example, if this server is MS-SQL server, I would do vulnerability
scan for the OS, then for the SQL system.

If the server is a web server, I would check its compliance with  a
secured web server policy.

Currently I am using Internet Scanner from ISS, but I am looking for
free systems.

Regards,

-----Original Message-----
From: Jonathan Loh [mailto:kj6loh () yahoo com] 
Sent: Thursday, September 23, 2004 2:26 AM
To: Fahad Al-Suwais; security-basics () securityfocus com
Subject: Re: free hIDS, or system assessment tools

How system assesment, from security standpoint (scan for vulns),
hardware
standpoint (something like norton syscheck), what standpoint do you want
the
system assessment from?  Since this is a security group, I'll assume its
from
the security standpoint. 

rkhunter scans for potential rootkits
iss, cops, tiger they are all old (90's) but still good.  
--- Fahad Al-Suwais <suwaisfa () alrajhibank com sa> wrote:

> Dear...
>
> As I know snort is nIDS, nessus is network assessment tool
>
> But 
> Is there any free System Assessment tools for windows and *nix
> Is there any free System or host IDS for windows and *nix
>
> Please if you know any products let me know
>
> Regards,
------------------------------------------------------------------------
---
> Computer Forensics Training at the InfoSec Institute. All of our class
sizes
> are guaranteed to be 12 students or less to facilitate one-on-one
> interaction with one of our expert instructors. Gain the in-demand
skills of
> a certified computer examiner, learn to recover trace data left behind
by
> fraud, theft, and cybercrime perpetrators. Discover the source of
computer
> crime and abuse so that it never happens again.
http://www.infosecinstitute.com/courses/computer_forensics_training.html
>
------------------------------------------------------------------------
----
>



                
__________________________________
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
http://promotions.yahoo.com/new_mail



---------------------------------------------------------------------------
Computer Forensics Training at the InfoSec Institute. All of our class sizes
are guaranteed to be 12 students or less to facilitate one-on-one
interaction with one of our expert instructors. Gain the in-demand skills of
a certified computer examiner, learn to recover trace data left behind by
fraud, theft, and cybercrime perpetrators. Discover the source of computer
crime and abuse so that it never happens again.

http://www.infosecinstitute.com/courses/computer_forensics_training.html
----------------------------------------------------------------------------