Security Basics mailing list archives

Re: Similar product to tripwire enterprise?


From: Stephen Thornber <skthornber () mac com>
Date: Thu, 10 Jul 2008 17:06:50 +0100

Hello,
I am using two items together.

(Much cheeper than Tripwire)

SPLUNK for log correlation

Honeycomb for investigation and reporting

Stephen


On 10 Jul 2008, at 15:18, Zhihao wrote:

Hi guys, are there any similar products to tripwire enterprise? What I do
need is a solution that can monitor windows based file servers for
unauthorized modification or destruction of files. Ideally the solution should also provide visibility of anyone who modified or delete files. the
solution should also have good reporting capabilities. thanks for any
suggestions!



Current thread: