Re: Detecting File Alteration

["Fósforo" <fosforo () gmail com>]

Labrador-IDS is also a good choice - and it is perl based.

http://www.clavis.com.br/opensource.htm

abs.

On 9/5/06, offset <offset () ubersecurity org> wrote:
> I dont recall if your original email required this to run on windows or
> *nix.
>
> I've used samhain on *nix with no issues, not sure about windows.
>
> http://www.la-samhna.de/samhain/
>
> -off
>
> On Thu, Aug 31, 2006 at 11:44:14PM -0400, Mister Dookie wrote:
> > Tripwire is awfully expensive for a small company... there must be
> > something in the freeware realm or at least something cheaper that
> > accomplishes the same thing as Tripwire.
> >
> > On 8/31/06, Peter Marshall <petermmarshall () hotmail com> wrote:
> > > Tripwire as well . . .
> > >
> > >-----Original Message-----
> > >From: Saqib Ali [mailto:docbook.xml () gmail com]
> > >Sent: Thursday, August 31, 2006 3:49 PM
> > >To: Mister Dookie
> > >Cc: security-basics () securityfocus com
> > >Subject: Re: Detecting File Alteration
> > >
> > >Filemon???
> > >http://www.sysinternals.com/Utilities/Filemon.html
> > >
> > >filters as well....
> > >
> > >--
> > >Saqib Ali, CISSP, ISSAP
> > >Support http://www.capital-punishment.net
> > >-----------
> > >"I fear, if I rebel against my Lord, the retribution of an Awful Day (The
> > >Day of Resurrection)" Al-Quran 6:15
> > >-----------
>
> ---------------------------------------------------------------------------
> This list is sponsored by: Norwich University
>
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The NSA has designated Norwich University a center of Academic Excellence
> in Information Security. Our program offers unparalleled Infosec management
> education and the case study affords you unmatched consulting experience.
> Using interactive e-Learning technology, you can earn this esteemed degree,
> without disrupting your career or home life.
>
> http://www.msia.norwich.edu/secfocus
> ---------------------------------------------------------------------------


--
----------------------------------------------------------------------
Fósforo
Blog: http://insanenetworks.blogspot.com
----------------------------------------------------------------------