What I need is a system vulnerability scanner, and it have some policies
to compare the compliance with it.
For example, if this server is MS-SQL server, I would do vulnerability
scan for the OS, then for the SQL system.
If the server is a web server, I would check its compliance with a
secured web server policy.
Currently I am using Internet Scanner from ISS, but I am looking for
free systems.
Regards,
-----Original Message-----
From: Jonathan Loh [mailto:kj6loh@yahoo.com]
Sent: Thursday, September 23, 2004 2:26 AM
To: Fahad Al-Suwais; security-basics@securityfocus.com
Subject: Re: free hIDS, or system assessment tools
How system assesment, from security standpoint (scan for vulns),
hardware
standpoint (something like norton syscheck), what standpoint do you want
the
system assessment from? Since this is a security group, I'll assume its
from
the security standpoint.
rkhunter scans for potential rootkits
iss, cops, tiger they are all old (90's) but still good.
--- Fahad Al-Suwais <suwaisfa@alrajhibank.com.sa> wrote:
Dear...
As I know snort is nIDS, nessus is network assessment tool
But
Is there any free System Assessment tools for windows and *nix
Is there any free System or host IDS for windows and *nix
Please if you know any products let me know
Regards,
------------------------------------------------------------------------
---
Computer Forensics Training at the InfoSec Institute. All of our class
sizes
are guaranteed to be 12 students or less to facilitate one-on-one
interaction with one of our expert instructors. Gain the in-demand
skills of
a certified computer examiner, learn to recover trace data left behind
by
fraud, theft, and cybercrime perpetrators. Discover the source of
computer
crime and abuse so that it never happens again.
http://www.infosecinstitute.com/courses/computer_forensics_training.html
------------------------------------------------------------------------
----
__________________________________
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
http://promotions.yahoo.com/new_mail
---------------------------------------------------------------------------
Computer Forensics Training at the InfoSec Institute. All of our class sizes
are guaranteed to be 12 students or less to facilitate one-on-one
interaction with one of our expert instructors. Gain the in-demand skills of
a certified computer examiner, learn to recover trace data left behind by
fraud, theft, and cybercrime perpetrators. Discover the source of computer
crime and abuse so that it never happens again.
http://www.infosecinstitute.com/courses/computer_forensics_training.html
----------------------------------------------------------------------------
