Home page logo
/

basics logo Security Basics mailing list archives

RE: Detecting File Alteration
From: "Young, Randy" <RWYoung () verisign com>
Date: Tue, 5 Sep 2006 11:57:45 -0700

That would have been my suggestion as well for a free solution. In fact
Hal Pomeranz, who wrote and usually teaches the UNIX Security class at
SANS wrote an article for SysAdmin magazine earlier this year on a good
way to securely use AIDE. Here is the URL to the article:

http://www.samag.com/documents/s=9950/sam0602a/0602a.htm

Randy 

-----Original Message-----
From: Jordan Jason [mailto:Jordan_Jason () bah com] 
Sent: Tuesday, September 05, 2006 8:08 AM
To: Mister Dookie; security-basics () securityfocus com
Subject: RE: Detecting File Alteration

You could try AIDE.  I believe it does mostly the same thing 
as Tripwire.  I've never used it, but in the SANS course I 
took, they spoke highly of it.  

http://sourceforge.net/projects/aide

-----Original Message-----
From: Mister Dookie [mailto:misterdookie () gmail com]
Sent: Thursday, August 31, 2006 11:44 PM
To: security-basics () securityfocus com
Subject: Re: Detecting File Alteration

Tripwire is awfully expensive for a small company... there 
must be something in the freeware realm or at least something 
cheaper that accomplishes the same thing as Tripwire.

On 8/31/06, Peter Marshall <petermmarshall () hotmail com> wrote:
 Tripwire as well . . .

-----Original Message-----
From: Saqib Ali [mailto:docbook.xml () gmail com]
Sent: Thursday, August 31, 2006 3:49 PM
To: Mister Dookie
Cc: security-basics () securityfocus com
Subject: Re: Detecting File Alteration

Filemon???
http://www.sysinternals.com/Utilities/Filemon.html

filters as well....

--
Saqib Ali, CISSP, ISSAP
Support http://www.capital-punishment.net
-----------
"I fear, if I rebel against my Lord, the retribution of an Awful Day
(The
Day of Resurrection)" Al-Quran 6:15
-----------


--------------------------------------------------------------
----------
---
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE 
The NSA has 
designated Norwich University a center of Academic Excellence in
Information
Security. Our program offers unparalleled Infosec 
management education
and
the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed
degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus

--------------------------------------------------------------
----------
---




--------------------------------------------------------------
----------
---
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE 
The NSA has 
designated Norwich University a center of Academic
Excellence
in Information Security. Our program offers unparalleled Infosec
management
education and the case study affords you unmatched consulting
experience.
Using interactive e-Learning technology, you can earn this esteemed
degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus

--------------------------------------------------------------
----------
---



--------------------------------------------------------------
----------
---
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE 
The NSA has designated Norwich University a center of 
Academic Excellence in Information Security. Our program 
offers unparalleled Infosec management education and the case 
study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this 
esteemed degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
--------------------------------------------------------------
----------
---

--------------------------------------------------------------
-------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE 
The NSA has designated Norwich University a center of 
Academic Excellence in Information Security. Our program 
offers unparalleled Infosec management education and the case 
study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this 
esteemed degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
--------------------------------------------------------------
-------------




---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]