Try Open Source Tripwire for Lnx, it's designed to baseline your file system, should work fine for system update/change management.
For Windows try an MSI builder, you can monitor registry and file system modifications, no need for long analysis. You can create a new MSI package immediately after the update is completed, then inspect the resultant file, the builder will have an editor to open MSI package to edit them - it's designed to work between reboots too which is essential. It's a manual process, but very simple with just one software tool, which works best when installed on a remote server and run from a share - run the builder to scan the system, patch/reboot/patch, run the builder and scan again to create the msi, open the msi to review all file, registry, ddl registration, txt file content changes..... There is a free one in the Tools dir on the Windows2003 CD (WinInstall LE), there are several free starter packages out there as well.
adam
-----Original Message-----
From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]] On Behalf Of haZard0us
Sent: Thursday, June 14, 2012 1:46 PM
To: security-basics (at) securityfocus (dot) com [email concealed]
Subject: Operative System Updates
Hi all,
I need to create a script that gathers information of the OS before and after the updates in order to detect changes and which updates/service packs were used.
To be honest, I really don't know where to start. So, my question is which information should i gather in order to detect correctly which files were changed and which updates were used.
Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
Try Open Source Tripwire for Lnx, it's designed to baseline your file system, should work fine for system update/change management.
For Windows try an MSI builder, you can monitor registry and file system modifications, no need for long analysis. You can create a new MSI package immediately after the update is completed, then inspect the resultant file, the builder will have an editor to open MSI package to edit them - it's designed to work between reboots too which is essential. It's a manual process, but very simple with just one software tool, which works best when installed on a remote server and run from a share - run the builder to scan the system, patch/reboot/patch, run the builder and scan again to create the msi, open the msi to review all file, registry, ddl registration, txt file content changes..... There is a free one in the Tools dir on the Windows2003 CD (WinInstall LE), there are several free starter packages out there as well.
adam
-----Original Message-----
From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]] On Behalf Of haZard0us
Sent: Thursday, June 14, 2012 1:46 PM
To: security-basics (at) securityfocus (dot) com [email concealed]
Subject: Operative System Updates
Hi all,
I need to create a script that gathers information of the OS before and after the updates in order to detect changes and which updates/service packs were used.
To be honest, I really don't know where to start. So, my question is which information should i gather in order to detect correctly which files were changed and which updates were used.
Thanks in advance.
--haZ
------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
------------------------------------------------------------------------
------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
------------------------------------------------------------------------
[ reply ]