full-disclosure - Windows 2003 Logging/Log Analysis Tool

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <5FEE0C02-6E64-41D6-A171-45883AF7514A@unspecific.com>
Date: Thu Nov 17 21:19:39 2005
From: madhat at unspecific.com (MadHat)
Subject: Windows 2003 Logging/Log Analysis Tool

On Nov 17, 2005, at 1:25 PM, Castigliola, Angelo wrote:
> As MadHat already suggested: for free tools I found that Snare
> (http://www.intersectalliance.com/projects/index.html) was the best
> however it lacks good notification features such as email or desktop
> alerts that inform you there is a problem . You basically need to
> monitor Snare's output.

I was meaning to suggest using snare on a windows box to report to a  
syslog server, then use something like SEC to actually monitor  
events.  Though the SNARE server is ok, and has some nice features,  
it is not flexible enough (last I checked anyway) for what I have  
needed in the past.   It's all free and works fairly well in my  
experience.

--
MadHat (at) Unspecific.com, C?ISSP
E786 7B30 7534 DCC2 94D5  91DE E922 0B21 9DDC 3E98
gpg --keyserver wwwkeys.us.pgp.net --recv-keys 9DDC3E98