RE: Auditing a Win2K box

["Ferino Mardo" <RMardo () ALJOMAIHBEV com>]

to start with, you can use MBSA (MS baseline security audit), then get
superscan4 from foundstone.com or checkout the security audit/scanner
from www.gfi.com.

all of the above are free except the ones from GFI which are actually
full working version for 30 days.

hth.

> -----Original Message-----
> From: xyberpix [mailto:xyberpix () xyberpix com] 
> Sent: Tuesday, October 05, 2004 07:18 PM
> To: Security Basics[List]
> Subject: Auditing a Win2K box
>
>
> Hi All,
>
> I've been asked to audit a Win2k server, and being used to 
> *nix boxes, I could really do with some pointers here. Aside 
> from Nessus,nmap and the likes thereof, can anyone please 
> point me to some decent software(preferably free), and or 
> docs/sites to do a security audit of a Win2k Server, and the 
> various things to look out for?
>
> TIA
>
> xyberpix
>
> -- 
> For security and Opensource news check out: 
> http://xyberpix.demon.co.uk