[Dshield] Audit device

Paul Marsh pmarsh at nmefdn.org
Wed Jan 24 13:20:08 GMT 2007


Kevin:

	Thanks for the info, I completely forgot about Belarc.

Thanx, Paul

-----Original Message-----
From: list-bounces at lists.dshield.org
[mailto:list-bounces at lists.dshield.org] On Behalf Of Kevin Ottalini
Sent: Tuesday, January 23, 2007 11:05 PM
To: General DShield Discussion List
Subject: Re: [Dshield] Audit device

Paul,
    MS Baseline security 2.1 is the one complete tool to check for OS
patch
level:
http://www.microsoft.com/technet/security/tools/mbsahome.mspx

There are some 2rd party tools like Belarc that have a very useful scan
and do attempt to check a/v status:
http://www.belarc.com/free_download.html

I have a little C# tool that I wrote that provides easy access to a
number of free scantools and A/V tools including O/S update links that
might help:
http://qsextreme.com/qs_toolkit

I'll be updating this in a few weeks to include a number of tools like
belarc.

If you have questions or comments about the toolkit, feel free to
contact me directly.
Kevin



----- Original Message -----
From: "Paul Marsh"
To: "General DShield Discussion List" <list at lists.dshield.org>
Sent: Tuesday, January 23, 2007 6:15 PM
Subject: [Dshield] Audit device
>
> Unfortunately I'm in the market for a device that can scan a
> laptop for patches and AV signatures checking to make sure everything
is
> up to date.  I had a very trusted third parties laptop connect to my
> network, VPN to their network, connect to their smtp and then launch
the
> Storm Worm.  Why they would allow exe's just boggles my mind.
> Unfortunately I can't go into details but SOP just isn't a part of
their
> play book.
>
> Thanx, Paul
>

_________________________________________

SANS 2007 March 29 - April 6 in San Diego, CA offers 52 Courses
taught by our top rated instructors plus a huge vendor tools expo.
Register Today! http://www.sans.org/info/2501 (BROCHURECODE: ISC)



The information in this transmittal (including attachments, if any) is privileged and confidential and is intended only for the recipient(s) listed above. Any review, use, disclosure, distribution or copying of this transmittal is prohibited except by or on behalf of the intended recipient. If you have received this transmittal in error, please notify me immediately by reply email and destroy all copies of the transmittal. Thank you.



More information about the list mailing list