Security Basics mailing list archives

RE: Hard Drive Intergrety Status


From: George Njoku <georgenjoku () optonline net>
Date: Sun, 02 Oct 2005 12:56:58 -0400

You can write a batch file or a script that will perform sysinfo or psinfo (
systeminternals admin tools ) on all remote boxes eg \\comp1 \\comp2 . Place
script in crontab or scheduled task.

George Njoku
System Engineer
gnjoku () corrections essexcountynj org


-----Original Message-----
From: IRCGNet [mailto:ircgnet () gmail com] 
Sent: Thursday, September 29, 2005 5:41 AM
To: Nicolas Kramer
Cc: security-basics () securityfocus com
Subject: Re: Hard Drive Intergrety Status

Nicolas Kramer wrote:
Can anyone help me with an aplication or method that can succeed in
the following task.

Check about 60 computers on LAN and all same workgroup the local C:
harddisk for changes. And if any changes found (as minimal as
possible, like new folder or new suspisious files or something) be
reported to the server.

All the local hdd are almost exactly the same if not exactly the same.
Server is running win2003 and the clients are all WinNT

Any idea how i can accomplish this task? (mayb like a MD5 sum or
somthing in that way(though md5 is for files) or an integrety checker,
i heard about it but have no knowledge about it, and google isnt
helping me out atm)

Thank you very much.
Nico

--
Nico

 
Doesn't Tripwire accomplish this task? I would find it hard to believe 
that there isn't a windows equivelant.

Michael


Current thread: