Searching Domain for Files

[bcg at struxural.com (Ben Greenfield)]

If you subscribe to the professional feed of Nessus, you gain access
to the compliance and audit capabilities.

You can easily modify the pre-written audit files to search for files
or content that you specify.  Tenable has already provided a huge
number of audit policies which can be used to search for all kinds of
sensitive information.

I've had a lot of success using these audit policies to search for PHI
data leakage for my clients.  The reporting is OK and the scripts are
easy to modify.

Here's a semi-generic link talking about some of the capabilities of Nessus:
http://www.nessus.org/products/professional-feed/index.php?view=compliance_checks

On Thu, Apr 29, 2010 at 11:41 AM, Shane Kelly <i0null at nightcoder.org> wrote:
> Hey Guys,
>
> I have a client that wants to search for certain files across their entire
> domain.? I am guessing it would be possible to create script to login to
> each machine with a domain administrator account and look for a file
> matching the relevant filename and/or checksum. I'm wondering if you anyone
> had done this before, or could recommend any software can do this? I know
> there is DLP software that can do this, but at this stage that would be
> massively overkill.
>
> Many thanks,
> Shane
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com



-- 
--
Benjamin C. Greenfield, CISSP

bcg [at] struxural.com

Domains and Hosting for Less from Struxural:
http://www.struxural.com