Osiris - Open Source File Integrity Management and PCI DSS

[pguibord () tngworldwide com]

Hi List,

Has anyone used Osiris FIM in a production environment on Windows 2003 servers. I am looking for input as it relates to 
stability and functionality.

With today's economic conditions I cannot get the budgeting for Solid Core or Trip Wire and need to go open source. If 
anyone else could possibly offer other suggestions of products (open source) I would truly appreciate it. Maybe 
something that could log to a centralized SIM. Osiris only logs to it's own managemnt console from what I read so far.



Thanks,

Paul Guibord

------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Learn all of the latest penetration testing techniques in InfoSec Institute's Ethical Hacking class. 
Totally hands-on course with evening Capture The Flag (CTF) exercises, Certified Ethical Hacker and Certified 
Penetration Tester exams, taught by an expert with years of real pen testing experience.

http://www.infosecinstitute.com/courses/ethical_hacking_training.html
------------------------------------------------------------------------