Re: Credit Card Data

Nessus, the professional version, can do this on windows targets. You could
use the windows file checks to do so. I believe there might even be a policy
already written up for this available for download.

On Mon, Oct 20, 2008 at 1:44 AM, Hill, Pete <[email protected]> wrote:

>  Hi there,
>
> I am currently running through an audit of my estate and am trying to find
> a tool that can scan the entire network and let me know where there are any
> credit card details being stored.
>
> We have a secure set up at the moment, but we are going to be
> professionally auditted soon and the auditors have mentioned they have a
> tool/s that will perform this check for us.  I simply want to run through
> this procedure first to make sure there are no surprises when they come in.
> I am comfortable that  I know where our data is stored, but want to ensure a
> user hasnt copied something somewhere they shouldnt have!
>
> Can Nessus help me do this either on its own or in conjunction with
> a.n.other tool/s?
>
> Regards
> Pete
>
>
> Pete Hill
> *IS Security Engineer*
>
>
> Sit-Up House
> 179-181 The Vale
> London
> W3 7RW
>
>  020 8600 9700
>  020 8328 3424
>
>  07530 892686
>
>
>
>
>   *Pete.*[email protected] <[email protected]>
>
> http://www.sit-up.tv
> http://www.bid.tv
> http://www.price-drop.tv
> http://www.speedauction.tv
>
>
> Note: To protect against computer viruses, e-mail programs may prevent
> sending or receiving certain types of file attachments. Check your e-mail
> security settings to determine how attachments are handled.
>
>
>
>
>
> A number of bogus e-mails are currently circulating in the UK encouraging
> customers to visit fraudulent websites where personal or Internet security
> details are requested. Bid tv/Price-drop tv/Speed auction tv would never
> send e-mails that ask for confidential, personal security information or
> details regarding your account status.
>
>
>
> The content of this e-mail does not constitute a contract and any matters
> discussed herein remain subject to contract.
>
>
>
> The contents of this message and all attachments have been sent in
> confidence for the attention of the addressee only. If you are not the
> intended recipient you are kindly requested to preserve this confidentiality
> and to advise the sender immediately of the error in transmission.
>
>
>
> "sit-up ltd, registered in England No: 03877786.
>
> Registered Office: sit-up House, 179-181 The Vale, London W3 7RW.
>
> sit-up ltd is wholly owned by a subsidiary of Virgin Media."
>
>
>
> _______________________________________________
> Nessus mailing list
> [email protected]
> http://mail.nessus.org/mailman/listinfo/nessus
>



-- 
Doug Nordwall
Unix, Network, and Security Administrator
You mean the vision is subject to low subscription rates?!!? - Scott Stone,
on MMORPGs

_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus