IDS mailing list archives

Re: Host Based IDS Recommendations?


From: "dreamwvr () dreamwvr com" <dreamwvr () dreamwvr com>
Date: Sat, 11 Oct 2003 09:02:03 -0600

On Fri, Oct 10, 2003 at 02:40:51PM +0800, Alvin Wong wrote:
Hi,

I would like to find out for Windows boxes if there are any
recommendations for Host based IDS, i know that for unix there is AIDE,
linux, tripwire. What are the solutions for Windows machines? Would
running a software IDS that is capable of monitoring and protecting the
file systems a la tripwire with signed hashes kept in removable media be
sufficient? If there are, what are the usual suspects for host based IDS
that is used prevalently in industry? I'm hoping for both free and
commercial solutions
Alvin;
     Well you could try the cywin port of AIDE if it is still 
around. Then adjust for taste. TMTOWTDI. 

Best REgards,
dreamwvr () dreamwvr com

-- 
/*  Security is a work in progress - dreamwvr                 */
#                               48 69 65 72 6F 70 68 61 6E 74 32
# Note: To begin Journey type man afterboot,man help,man hier[.]      
# 66 6F 72 20 48 69 72 65                              0000 0001
// "Who's Afraid of Schrodinger's Cat?" /var/(.)?mail/me \?  ;-]

---------------------------------------------------------------------------
Captus Networks IPS 4000
Intrusion Prevention and Traffic Shaping Technology to: 
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans
 - Automatically Control P2P, IM and Spam Traffic
 - Precisely Define and Implement Network Security & Performance Policies
FREE Vulnerability Assessment Toolkit - WhitePapers - Live Demo 
http://www.securityfocus.com/sponsor/CaptusNetworks_focus-ids_000101
---------------------------------------------------------------------------


Current thread: