RE: Detecting File Alteration

["Young, Randy" <RWYoung () verisign com>]

That would have been my suggestion as well for a free solution. In fact
Hal Pomeranz, who wrote and usually teaches the UNIX Security class at
SANS wrote an article for SysAdmin magazine earlier this year on a good
way to securely use AIDE. Here is the URL to the article:

http://www.samag.com/documents/s=9950/sam0602a/0602a.htm

Randy 

> -----Original Message-----
> From: Jordan Jason [mailto:Jordan_Jason () bah com] 
> Sent: Tuesday, September 05, 2006 8:08 AM
> To: Mister Dookie; security-basics () securityfocus com
> Subject: RE: Detecting File Alteration
>
> You could try AIDE.  I believe it does mostly the same thing 
> as Tripwire.  I've never used it, but in the SANS course I 
> took, they spoke highly of it.  
>
> http://sourceforge.net/projects/aide
>
> -----Original Message-----
> From: Mister Dookie [mailto:misterdookie () gmail com]
> Sent: Thursday, August 31, 2006 11:44 PM
> To: security-basics () securityfocus com
> Subject: Re: Detecting File Alteration
>
> Tripwire is awfully expensive for a small company... there 
> must be something in the freeware realm or at least something 
> cheaper that accomplishes the same thing as Tripwire.
>
> On 8/31/06, Peter Marshall <petermmarshall () hotmail com> wrote:
> >  Tripwire as well . . .
> >
> > -----Original Message-----
> > From: Saqib Ali [mailto:docbook.xml () gmail com]
> > Sent: Thursday, August 31, 2006 3:49 PM
> > To: Mister Dookie
> > Cc: security-basics () securityfocus com
> > Subject: Re: Detecting File Alteration
> >
> > Filemon???
> > http://www.sysinternals.com/Utilities/Filemon.html
> >
> > filters as well....
> >
> > --
> > Saqib Ali, CISSP, ISSAP
> > Support http://www.capital-punishment.net
> > -----------
> > "I fear, if I rebel against my Lord, the retribution of an Awful Day
> (The
> > Day of Resurrection)" Al-Quran 6:15
> > -----------
> --------------------------------------------------------------
> ----------
> ---
> > This list is sponsored by: Norwich University
> >
> > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE 
> The NSA has 
> > designated Norwich University a center of Academic Excellence in
> Information
> > Security. Our program offers unparalleled Infosec 
> management education
> and
> > the case study affords you unmatched consulting experience.
> > Using interactive e-Learning technology, you can earn this esteemed
> degree,
> > without disrupting your career or home life.
> >
> > http://www.msia.norwich.edu/secfocus
> --------------------------------------------------------------
> ----------
> ---
> >
> --------------------------------------------------------------
> ----------
> ---
> > This list is sponsored by: Norwich University
> >
> > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE 
> The NSA has 
> > designated Norwich University a center of Academic
> Excellence
> > in Information Security. Our program offers unparalleled Infosec
> management
> > education and the case study affords you unmatched consulting
> experience.
> > Using interactive e-Learning technology, you can earn this esteemed
> degree,
> > without disrupting your career or home life.
> >
> > http://www.msia.norwich.edu/secfocus
> --------------------------------------------------------------
> ----------
> ---
> >
>
> --------------------------------------------------------------
> ----------
> ---
> This list is sponsored by: Norwich University
>
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE 
> The NSA has designated Norwich University a center of 
> Academic Excellence in Information Security. Our program 
> offers unparalleled Infosec management education and the case 
> study affords you unmatched consulting experience. 
> Using interactive e-Learning technology, you can earn this 
> esteemed degree, without disrupting your career or home life.
>
> http://www.msia.norwich.edu/secfocus
> --------------------------------------------------------------
> ----------
> ---
>
> --------------------------------------------------------------
> -------------
> This list is sponsored by: Norwich University
>
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE 
> The NSA has designated Norwich University a center of 
> Academic Excellence in Information Security. Our program 
> offers unparalleled Infosec management education and the case 
> study affords you unmatched consulting experience. 
> Using interactive e-Learning technology, you can earn this 
> esteemed degree, without disrupting your career or home life.
>
> http://www.msia.norwich.edu/secfocus
> --------------------------------------------------------------
> -------------

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------