Section: .. / NT / audit /
| /// File Name: |
hpntbast10.zip |
Description:
|
"Building a Windows NT bastion host in practice V1.01" (Adobe PDF zipped) - Building a Windows NT bastion host in practice V1.01 - This paper presents a checklist for converting a default Windows NT installation to a bastion host. A bastion host is a computer system that is exposed to attack, and may be a critical component in a network security system. Special attention must be paid to these highly fortified hosts, both during initial construction and ongoing operation. Bastion hosts can include Firewall gateways, Web servers, FTP servers, Name servers (DNS), Mail hubs and Victim hosts (sacrificial lambs).
| | Author: | Stefan Norberg. | | File Size: | 129933 | | Last Modified: | Aug 16 20:03:21 1999 |
| MD5 Checksum: | 47be9c534b5d26ab00f142c4e0025286 |
|
| /// File Name: |
gobbler.packet.sniffer.zip |
Description:
|
Gobbler packet sniffer.
| | File Size: | 118934 | | Last Modified: | Aug 16 20:03:21 1999 |
| MD5 Checksum: | fb93bed53300f2025eb15f74923a5007 |
|
| /// File Name: |
pwdump.passwd.list.ex_ |
Description:
|
PWDUMP Password lister.
| | File Size: | 114688 | | Last Modified: | Aug 16 20:03:27 1999 |
| MD5 Checksum: | 7aacdd4c4aae9aa2f557df640440447b |
|
| /// File Name: |
NTLast30.zip |
Description:
|
NTLast v3.0 is a security audit tool for Windows NT. It can help identify and track who has gained access to your system, and document the details. Includes raw time output for Excel analysis and additional features for Webmasters.
| | Author: | JD Glaser | | Homepage: | http://www.foundstone.com | | File Size: | 109049 | | Last Modified: | Dec 13 01:06:40 2000 |
| MD5 Checksum: | 6f46575a1866d7ccd6967e16a210d62c |
|
| /// File Name: |
commspy.comport.monitor.zip |
Description:
|
commspy comport monitor.
| | File Size: | 104665 | | Last Modified: | Aug 16 20:03:21 1999 |
| MD5 Checksum: | 5658de4f256abc6e08c2fb5776d12766 |
|
| /// File Name: |
NessusJ-JFC-980705.zip |
Description:
|
NessusJ-JFC-980705.zip
| | File Size: | 91126 | | Last Modified: | Aug 16 20:03:18 1999 |
| MD5 Checksum: | c67850e0f859ea1ad8f7ecbc044e861f |
|
| /// File Name: |
NessusJ-alpha2-fix1.tar.gz |
Description:
|
NessusJ-alpha2-fix1.tar.gz
| | File Size: | 82791 | | Last Modified: | Aug 16 20:03:34 1999 |
| MD5 Checksum: | b62ad177029eb5fff63d4d4b6b16201c |
|
| /// File Name: |
DUMPEVT.ZIP |
Description:
|
Somarsoft DumpEvt V1.7.3 - Windows NT program to dump the event log, in a format suitable for importing into a database. Used as basis for eventlog managment system, for long-term tracking of security violations, etc.
| | File Size: | 82267 | | Last Modified: | Aug 16 20:03:17 1999 |
| MD5 Checksum: | 2645ee0ea3db5502965605817a611a8c |
|
| /// File Name: |
NessusJ-alpha2.tar.gz |
Description:
|
NessusJ-alpha2.tar.gz
| | File Size: | 82135 | | Last Modified: | Aug 16 20:03:18 1999 |
| MD5 Checksum: | 6ed4e6ef1e7a6fdd3305d63360aab7b2 |
|
| /// File Name: |
sidsrc.zip |
Description:
|
Learn about the computer SID problem everybody has been talking about and get a free computer SID changer, NewSID, complete with full source code. For NT.
| | File Size: | 79400 | | Last Modified: | Aug 16 20:03:32 1999 |
| MD5 Checksum: | cb8afe51ecdd3442d81d6e628d24465a |
|
| /// File Name: |
RGEDIT.ZIP |
Description:
|
Somarsoft RegEdit V2.0 - DLL callable by 32 bit Visual Basic that can be used to view and/or modify user registry profile.
| | File Size: | 77187 | | Last Modified: | Aug 16 20:03:19 1999 |
| MD5 Checksum: | 0d2dbb6de98d97b8bfaccbe5fae4df0b |
|
| /// File Name: |
ntis422.exe |
Description:
|
NTInfoScan v4.2.2 is a security scanner designed specifically for the Windows NT 4.0 operating system. It's simple to use - you run it from a command line, and when the scan is finished it produces an HTML based report of security issues found with hyper-text links to vendor patches and further information. It tests a number of services such as ftp, telent, web service, for security problems. NTInfoScan will also check NetBIOS share security and User account security.
| | Author: | David Litchfield. | | File Size: | 71168 | | Last Modified: | Aug 16 20:03:25 1999 |
| MD5 Checksum: | 92495e6028dadb0c091162626d565640 |
|
| /// File Name: |
ntis.exe |
Description:
|
NTInfoScan v4b - NTInfoScan is a security scanner for NT 4.0 that is run from command line and produces an HTML based report of security issues found with hyper-text links to vendor patches and further information.
| | Author: | David Litchfield. | | File Size: | 69632 | | Last Modified: | Aug 16 20:03:25 1999 |
| MD5 Checksum: | 7a01cd2e7436ce7eb310f6ad4032c63c |
|
| /// File Name: |
Ntlast16.zip |
Description:
|
NTLast 1.6 is a security audit tool for Windows NT. It's a Win32 command line utility with several switches that search the event log for Interactive/Remote/Failed logon stats. In it's simplist form, it reports the last ten successful logons at your computer. NTLast does two significant things that event viewer does not. It can distinguish remote/interactive logons and it matches logon times with logoff times. NTLast is designed to assist your efforts in tracking down logon/logoff data.
| | Author: | JD Glaser, NT OBJECTives, Inc. | | File Size: | 67269 | | Last Modified: | Oct 4 21:04:32 1999 |
| MD5 Checksum: | ef5ec812f815b6b4ae27ad9af9bbaaa6 |
|
| /// File Name: |
secure_ntinstall.exe |
Description:
|
"Securing your Windows NT installation" - MSWord document published by the developers of Windows NT detailing major security concerns and fixes for an out-of-the-box installation of Windows NT. From Microsoft Security. Original document location is here.
| | File Size: | 67072 | | Last Modified: | Aug 16 20:03:30 1999 |
| MD5 Checksum: | 54e512f2f9fa33a230629516c61ef4d5 |
|
| /// File Name: |
ntis411.exe |
Description:
|
NTInfoScan v4.1.1 - NTInfoScan is a security scanner for NT 4.0 that is run from command line and produces an HTML based report of security issues found with hyper-text links to vendor patches and further information. 62k.
| | Author: | David Litchfield. | | File Size: | 63488 | | Last Modified: | Aug 16 20:03:25 1999 |
| MD5 Checksum: | 8a87d8b22557b4d709b7ea3fbe9dd8f9 |
|
| /// File Name: |
ntis41b.exe |
Description:
|
NTInfoScan v4.1beta - NTInfoScan is a security scanner for NT 4.0 that is run from command line and produces an HTML based report of security issues found with hyper-text links to vendor patches and further information. 62k.
| | Author: | David Litchfield. | | File Size: | 63488 | | Last Modified: | Aug 16 20:03:25 1999 |
| MD5 Checksum: | 6b550324b1ec1428f6f50734f178cc70 |
|
| /// File Name: |
AFind.exe |
Description:
|
AFind is the only tool that lists files by their last access time without tampering the data the way that right-clicking on file properties in Explorer will. AFind allows you to search for access times between certain time frames, coordinating this with logon info provided from ntlast, you can to begin determine user activity even if file logging has not been enabled. This is the latest release of AFind.
| | Author: | NTOBJECTives, Inc. | | File Size: | 54272 | | Last Modified: | Aug 16 20:03:17 1999 |
| MD5 Checksum: | b7468cc0570908d62f1f44afe0d51ede |
|
| /// File Name: |
grokevt-0.4.0.tar.gz |
Description:
|
GrokEVT is a collection of scripts for reading Windows event log files on Unix. The scripts work together on one or more mounted Windows partitions to extract all information needed (registry entries, message templates, and log files) to convert the logs to a human-readable format.
| | Author: | Tim Morgan | | Homepage: | http://www.sentinelchicken.org/projects/grokevt/ | | File Size: | 50309 | | Last Modified: | Apr 2 19:00:49 2007 |
| MD5 Checksum: | 0c260a44bf4caee2dfb43987199b2a2f |
|
| /// File Name: |
grokevt-0.4.1.tar.gz |
Description:
|
GrokEVT is a collection of scripts for reading Windows event log files on Unix. The scripts work together on one or more mounted Windows partitions to extract all information needed (registry entries, message templates, and log files) to convert the logs to a human-readable format.
| | Author: | Tim Morgan | | Homepage: | http://www.sentinelchicken.org/projects/grokevt/ | | File Size: | 50190 | | Last Modified: | Mar 21 18:48:54 2008 |
| MD5 Checksum: | 729ebacf9abc79130c80a6e599bb78dc |
|
| /// File Name: |
DUMPEVTD.ZIP |
Description:
|
There is also a DLL version of DumpEvt, which allows you to read the formatted event log from Visual Basic.
| | File Size: | 49640 | | Last Modified: | Aug 16 20:03:17 1999 |
| MD5 Checksum: | 4b777ed0496e0eabbb3be9eb3b224ad4 |
|
| /// File Name: |
newsid.zip |
Description:
|
Executable of above.
| | File Size: | 33495 | | Last Modified: | Aug 16 20:03:25 1999 |
| MD5 Checksum: | e6ee2ffc39bcb517a6ecf876b2f27fbe |
|
| /// File Name: |
samdump.extract.sam.info.zip |
Description:
|
Extract SAM info from samdump.
| | File Size: | 32816 | | Last Modified: | Aug 16 20:03:28 1999 |
| MD5 Checksum: | d3a3d2713c5ba8b9ad5f343c981ece22 |
|
| /// File Name: |
gsd.exe |
Description:
|
GSD (Get Service Dacl) gives you the DACL (Discretionary Access Control List) of the Windows NT service you specify as a command line option.
| | Author: | Arne Vidstrom. | | File Size: | 32768 | | Last Modified: | Oct 4 21:04:42 1999 |
| MD5 Checksum: | 68d340db93e090c0fd05c5b63b705d0c |
|
|
|
|
|