Re: intrusion detection

["Chris Berry" <compjma () hotmail com>]

> From: "andrew" <andrew.elmore () cyber-south com>
> Hi,
>     I need some intrusion detection software for windows 2000 server.
> Something that will detect, prevent, and maybe send logs back to a syslog
> server. Any suggestions? Also is there any logs I can look at besides w3svc
> logs? I want to look at anything. Not just IIS.

Get SNORT for windows http://www.sans.org/rr/intrusion/ACID.php

Chris Berry
compjma () hotmail com
Systems Administrator
JM Associates

"Without change, something sleeps inside us, and seldom awakens.  The 
sleeper must awaken." -- Duke Leto Atreides







_________________________________________________________________
MSN 8 with e-mail virus protection service: 2 months FREE*  
http://join.msn.com/?page=features/virus


---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the 
world's premier event for IT and network security experts.  The two-day 
Training features 6 hand-on courses on May 12-13 taught by professionals.  
The two-day Briefings on May 14-15 features 24 top speakers with no vendor 
sales pitches.  Deadline for the best rates is April 25.  Register today to 
ensure your place.  http://www.securityfocus.com/BlackHat-security-basics 
----------------------------------------------------------------------------