Chris,
Complete hash sets for all the MSFT OS's and much more exist in
http://www.nsrl.nist.gov/Project_Overview.htm
CD B has all MSFT OS's. Many MSFT apps exist on the other CD's as well.
See http://www.nsrl.nist.gov/index/mfg.index.txt for a complete list of all
the hash sets.
There are plenty of tools, including Fsum, that you can do a compare against
the list.
______________________________________
Dave Kleiman, CISSP, CISM, CIFI, MCSE
www.SecurityBreachResponse.com
-----Original Message-----
From: Mark Burnett [mailto:mb@xato.net]
Sent: Thursday, August 19, 2004 10:46
To: focus-ms@securityfocus.com
Cc: Chris Conacher
Subject: Re: MS binary integrity baseline
But there's no built-in method to verify hash signatures of files. You can
use a tool like fsum (http://www.slavasoft.com/fsum/) to create and verify
hashes but it isn't easy to directly compare them to the files on the
install CD because the files on the CD are all compressed. You would have to
build a baseline system and compare them to that.
Hope this helps,
Mark Burnett
On Wed, 18 Aug 2004 16:55:06 +0000, Chris Conacher wrote:
Dear List
Is there anything that performs binary integrity checks for Windows
OS such as rpm does for Redhat or apt does for Debian?
I want something that will check Windows binaries against a trusted
source - MS site, install cd, etc so that I can determine integrity
baselines of current production systems before deploying an
integrity checking application.
I would have thought that this would be something Microsoft would
provide, but have not seen anything.
Thanks for any input
Chris
_________________________________________________________________
Express yourself with cool new emoticons
http://www.msn.co.uk/specials/myemo
--------------------------------------------------------------------
------- ------------------------------------------------------------
---------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
