RE: MS binary integrity baseline

Well I think this is the utlity that will cover your needs.  Take a look at 
sigverif.exe located in the system32 Directory.  I believe this will do what 
you are asking for.  It will look through the system files and check to see 
if they are signed or not.  It outputs the entire scan into a text file that 
doesn't look to bad to parse.

Sean

-----Original Message-----
From: Chris Conacher [mailto:chris_conacher@hotmail.com]
Sent: Wednesday, August 18, 2004 9:55 AM
To: focus-ms@securityfocus.com
Subject: MS binary integrity baseline

Dear List

Is there anything that performs binary integrity checks for Windows OS such
as  rpm does for Redhat or apt does for Debian?

I want something that will check Windows binaries against a trusted source -
MS site, install cd, etc so that I can determine integrity baselines of
current production systems before deploying an integrity checking
application.

I would have thought that this would be something Microsoft would provide,
but have not seen anything.

Thanks for any input

Chris

_________________________________________________________________
Express yourself with cool new emoticons http://www.msn.co.uk/specials/myemo


---------------------------------------------------------------------------
---------------------------------------------------------------------------



---------------------------------------------------------------------------
---------------------------------------------------------------------------