Re: File Integrity Software - PCI

[jplee3 () yahoo com]

This may have already been brought up but OSSEC is another tool that could be used. Check it out - http://www.ossec.net/

It might be more 'difficult' to setup though, but I've found that tweaking the rules is probably the most 
time-consuming and difficult part. This is probably the case for most other FIMs.

We use Tripwire Enterprise at my company, but it isn't being utilized to the full extent and because of a lack of 
providing training to me, it's hard for me to use and fully understand. Overall, it's pretty complicated if you were 
just thrown in front of it and are expected to monitor security based on it.