Re: RE: Detecting File Alteration

[thomas.jones () securebuddha com]

Osiris is more modular than tripwire. Osiris uses individual agents installed on each host and a centralized server 
that actually houses and analyzes the data. This way no data is located on the individual hosts in case of compromise.

Agents can be installed on a multitude of OS's to include Windows, Linux, AIX and MAC.

Also if on a *nix environment --- look at FAM(File Alteration Monitor) --- http://savannah.nongnu.org/projects/fam/.

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------