clwsecurity (at) mistral.co (dot) uk [email concealed] wrote:
> Hi
>
> As part of 27001, I want to audit folder permissions. I have looked at some of the free scripts but would prefer something that is a bit more user friendly with a GUI rather than a txt dump. I have just started to look at ScriptLogic but are there any alternatives?
>
> I also want to be able to get alerts when the permissions of certain folders change (we have Quest installed to monitor changes to group permissions). Any ideas for this? Something that can do both would be great.
>
> Thanks
>
My company, Tenable Network Security, offers products to do much of this.
If you are familiar with Nessus, Tenable has added the ability to audit
the configuration of Windows and UNIX hosts including things like
specific object permissions on Windows servers. You can see a video or
webinar of it here:
video:
http://cgi.tenablesecurity.com/demos/compliance-demo/compliance-demo.htm
l
webinar (requires registration):
https://www.gotomeeting.com/register/847795663
For getting alerts when a folder's permissions change, most SIMs can
alert you to do those things. Tenable has a product named the Log
Correlation Engine that can process windows events (among many other
sources) and produce alerts when objects on a server change.
Ron Gula, CTO
Tenable Network Security
http://www.tenablesecurity.com
> Hi
>
> As part of 27001, I want to audit folder permissions. I have looked at some of the free scripts but would prefer something that is a bit more user friendly with a GUI rather than a txt dump. I have just started to look at ScriptLogic but are there any alternatives?
>
> I also want to be able to get alerts when the permissions of certain folders change (we have Quest installed to monitor changes to group permissions). Any ideas for this? Something that can do both would be great.
>
> Thanks
>
My company, Tenable Network Security, offers products to do much of this.
If you are familiar with Nessus, Tenable has added the ability to audit
the configuration of Windows and UNIX hosts including things like
specific object permissions on Windows servers. You can see a video or
webinar of it here:
video:
http://cgi.tenablesecurity.com/demos/compliance-demo/compliance-demo.htm
l
webinar (requires registration):
https://www.gotomeeting.com/register/847795663
For getting alerts when a folder's permissions change, most SIMs can
alert you to do those things. Tenable has a product named the Log
Correlation Engine that can process windows events (among many other
sources) and produce alerts when objects on a server change.
Ron Gula, CTO
Tenable Network Security
http://www.tenablesecurity.com
[ reply ]