Pre-deployment security (Tripwire, etc.)

[Ed Lawson]

On Mon, 27 Feb 2006 10:57:02 -0500
"Ben Scott" <dragonhawk at gmail.com> wrote:


>   I did some work with Tripwire and alternatives a few years
ago,
> although I haven't touched it recently.  Anyone want to toss
out
> alternatives/suggestions/best practices/etc?


As one who does not do this stuff as a day job, but who worries
, I found Tripwire and Snort to be a good combo.
 Of course you need to have reports send to you and then you need
to read the reports and think about what you see in the reports. 


Ed Lawson