Re: MS binary integrity baseline

Chris,
 
> Is there anything that performs binary integrity
> checks for Windows OS such 
> as  rpm does for Redhat or apt does for Debian?

Sure...Windows File Protection.

> I want something that will check Windows binaries
> against a trusted source - 
> MS site, install cd, etc so that I can determine
> integrity baselines of 
> current production systems before deploying an
> integrity checking application.

Baselines of what?  All files?  Or only system files? 
Besides WFP, there are commercial products like
Tripwire.  

In addition, it's pretty trivial to roll your own in
Perl.  My web site
(http://patriot.net/~carvdawg/perl.html) has example
code you can use quite easily, and my book
(http://www.windows-ir.com) also includes some of the
same code.

> I would have thought that this would be something
> Microsoft would provide, but have not seen anything.

Well, depending on what it is you're looking for
exactly, maybe they already did.  But then, if they
didn't provide something to meet *you're* specific
needs, then what they've done is open up an economy by
allowing someone to provide such a thing.

---------------------------------------------------------------------------
---------------------------------------------------------------------------