Re: FIM Tool

John Kinsella wrote:
> Check out ossec - open source host-based IDS that supports a bunch of
> OSes including Windows: http://www.ossec.net/
> 
> John
> 

ossec works great in Windows but take into account that you will need a
Linux box running the server side of ossec. Ossec in windows is an agent
that requires a server to report to.

ossec also allows you to enable reaction and email alerting in case the
protected directories are changed.

Regards,


-- 
Francisco Neira Basso
Seguridad de la Informacion
Miembro # 565432 ISACA
Usuario Linux # 165985
Defensoria del Pueblo

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org/

iQEVAwUBTDX4eun0j6eXY7eLAQICTQf/aBJ3+/Nsxivg+Qdiu1Q+v8g5uXHqD6HP
RndIrkPVMAOXzOOWqGBhM5J8KOtw9cnkGL0DdVR0d+8F6uyyT1xbagFphJqXkfw2
TzmxD/oPDib04m2Q+tHWwuXdt004DNnTaum2DYSPeK4+8uK8Cj4u8uOevmJN8qA+
GAOTPzSAI5KmQXh1RniAesq5Fs0K1iC8/3YF62RX5U6RfHFL3ZdGdUwk1YnOBq2h
EFFfpIEygwgVkW1ANF+tnQUYlfdtRGci80dILEPEni9YFbr2tSzSmGm2aP5dRHDS
PzOkSHUyGTQQTzjvh/uONASdObGp2kpi6R0YnszULPo+73rM8WtVZA==
=3hyq
-----END PGP SIGNATURE-----