[prev in list] [next in list] [prev in thread] [next in thread]
List: ossec-list
Subject: Re: [ossec-list] checksum
From: David Juarez <djuarez2 () usfca ! edu>
Date: 2013-10-24 18:38:01
Message-ID: CAGAkc+6yjpBJROdnDo1PGMxjxoOGFB_nTvPUjVK8BFVv2qnNGA () mail ! gmail ! com
[Download RAW message or body]
Great !!!
Thank you so much.. I really appreciate it.. I will definitely check these
links..
Kind regards,
D.J.
On Thu, Oct 24, 2013 at 11:32 AM, Saul Alanis <sdalano@gmail.com> wrote:
> I would recommend learning and understanding the anatomy of a Linux file
> system.
>
> This link is the best I could find; it's a 7 part series.
>
>
> http://www.cyberciti.biz/tips/understanding-unixlinux-filesystem-inodes.html
>
> There is also a very good book on Unix forensics called Forensic
> Discovery.
>
> Understanding the Linux file system is essential if you're doing
> Unix/Linux security.
>
>
> http://www.amazon.com/Forensic-Discovery-Dan-Farmer/dp/020163497X/ref=sr_1_1?s=books&ie=UTF8&qid=1382639255&sr=1-1&keywords=Forensic+Discovery
>
> Enjoy!
>
>
> On Thu, Oct 24, 2013 at 12:47 PM, David Juarez <djuarez2@usfca.edu> wrote:
>
> > normally a file as a md5sum
> > example
> > $ ls
> > $ touch test
> > $ md5sum test
> > d41d8cd98f00b204e9800998ecf8427e test
> > $
> > $ vi test
> > $ md5sum test
> > d8e8fca2dc0f896fd7cb4cb0031ba249 test
> > $
> >
> >
> > I made changes to the file and md5sum changed... Is there any way to be
> > notified when someone make changes to a file or directory via md5sum?
> > except that I don't want to get any notification if I myself make changes
> > to file?
> >
> > Is my question more clear now?
> > Thanks.
> >
> >
> >
> >
> >
> > On Wed, Oct 23, 2013 at 6:02 PM, Saul Alanis <sdalano@gmail.com> wrote:
> >
> > > How about a distribution list?
> > > On Oct 23, 2013 7:49 PM, "David Juarez" <djuarez2@usfca.edu> wrote:
> > >
> > > > Hello,
> > > >
> > > > Where can I find documentation to restrict user's to be notified for
> > > > checksum (changing files, directories)?
> > > >
> > > > If would like to be notified for any changes on files and directories
> > > > for other people than me..
> > > >
> > > > Many Thanks.
> > > >
> > > > Regards,
> > > > David J.
> > > >
> > > > --
> > > >
> > > > ---
> > > > You received this message because you are subscribed to the Google
> > > > Groups "ossec-list" group.
> > > > To unsubscribe from this group and stop receiving emails from it, send
> > > > an email to ossec-list+unsubscribe@googlegroups.com.
> > > > For more options, visit https://groups.google.com/groups/opt_out.
> > > >
> > > --
> > >
> > > ---
> > > You received this message because you are subscribed to the Google
> > > Groups "ossec-list" group.
> > > To unsubscribe from this group and stop receiving emails from it, send
> > > an email to ossec-list+unsubscribe@googlegroups.com.
> > > For more options, visit https://groups.google.com/groups/opt_out.
> > >
> >
> > --
> >
> > ---
> > You received this message because you are subscribed to the Google Groups
> > "ossec-list" group.
> > To unsubscribe from this group and stop receiving emails from it, send an
> > email to ossec-list+unsubscribe@googlegroups.com.
> > For more options, visit https://groups.google.com/groups/opt_out.
> >
>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ossec-list+unsubscribe@googlegroups.com.
> For more options, visit https://groups.google.com/groups/opt_out.
>
--
---
You received this message because you are subscribed to the Google Groups \
"ossec-list" group. To unsubscribe from this group and stop receiving emails from it, \
send an email to ossec-list+unsubscribe@googlegroups.com. For more options, visit \
https://groups.google.com/groups/opt_out.
[Attachment #3 (text/html)]
<div dir="ltr"><div><div><div>Great !!!<br><br></div>Thank you so much.. I really \
appreciate it.. I will definitely check these links..<br><br></div>Kind \
regards,<br></div>D.J.<br></div><div class="gmail_extra"><br><br><div \
class="gmail_quote"> On Thu, Oct 24, 2013 at 11:32 AM, Saul Alanis <span \
dir="ltr"><<a href="mailto:sdalano@gmail.com" \
target="_blank">sdalano@gmail.com</a>></span> wrote:<br><blockquote \
class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex"> <div dir="ltr"><div>I would recommend learning and \
understanding the anatomy of a Linux file system.<br><br></div>This link is the best \
I could find; it's a 7 part series.<br><div><br><a \
href="http://www.cyberciti.biz/tips/understanding-unixlinux-filesystem-inodes.html" \
target="_blank">http://www.cyberciti.biz/tips/understanding-unixlinux-filesystem-inodes.html</a><br>
<br></div><div>There is also a very good book on Unix forensics called Forensic \
Discovery. <br><br>Understanding the Linux file system is essential if you're \
doing Unix/Linux security.<br><br><a \
href="http://www.amazon.com/Forensic-Discovery-Dan-Farmer/dp/020163497X/ref=sr_1_1?s=books&ie=UTF8&qid=1382639255&sr=1-1&keywords=Forensic+Discovery" \
target="_blank">http://www.amazon.com/Forensic-Discovery-Dan-Farmer/dp/020163497X/ref= \
sr_1_1?s=books&ie=UTF8&qid=1382639255&sr=1-1&keywords=Forensic+Discovery</a><br>
<br></div><div>Enjoy!<br></div></div><div class="HOEnZb"><div class="h5"><div \
class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Oct 24, 2013 at 12:47 \
PM, David Juarez <span dir="ltr"><<a href="mailto:djuarez2@usfca.edu" \
target="_blank">djuarez2@usfca.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex"><div dir="ltr"><div><div><div><div>normally a file as a \
md5sum<br></div>example<br>$ ls<br>$ touch test<br>$ md5sum test<br>
d41d8cd98f00b204e9800998ecf8427e test<br>$<br>$ vi test<br>$ md5sum \
test<br>d8e8fca2dc0f896fd7cb4cb0031ba249 test<br> $<br><br><br></div>I made changes \
to the file and md5sum changed... Is there any way to be notified when someone make \
changes to a file or directory via md5sum? except that I don't want to get any \
notification if I myself make changes to file?<br>
<br></div>Is my question more clear \
now?<br></div>Thanks.<br><br><div><div><div><br><br></div></div></div></div><div><div><div \
class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Oct 23, 2013 at 6:02 PM, \
Saul Alanis <span dir="ltr"><<a href="mailto:sdalano@gmail.com" \
target="_blank">sdalano@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex"><p dir="ltr">How about a distribution list?</p> <div \
class="gmail_quote"><div>On Oct 23, 2013 7:49 PM, "David Juarez" <<a \
href="mailto:djuarez2@usfca.edu" target="_blank">djuarez2@usfca.edu</a>> wrote:<br \
type="attribution"></div><blockquote class="gmail_quote" style="margin:0 0 0 \
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div>
<div dir="ltr"><div>Hello,<br><br></div><div>Where can I find documentation to \
restrict user's to be notified for checksum (changing files, \
directories)?<br><br></div><div>If would like to be notified for any changes on files \
and directories for other people than me..<br>
<br></div><div>Many Thanks.<br><br></div><div>Regards,<br>David J.<br></div></div>
<p></p></div></div>
-- <br><div>
<br>
--- <br>
You received this message because you are subscribed to the Google Groups \
"ossec-list" group.<br> To unsubscribe from this group and stop receiving \
emails from it, send an email to <a \
href="mailto:ossec-list%2Bunsubscribe@googlegroups.com" \
target="_blank">ossec-list+unsubscribe@googlegroups.com</a>.<br> For more options, \
visit <a href="https://groups.google.com/groups/opt_out" \
target="_blank">https://groups.google.com/groups/opt_out</a>.<br> \
</div></blockquote></div><div><div>
<p></p>
-- <br>
<br>
--- <br>
You received this message because you are subscribed to the Google Groups \
"ossec-list" group.<br> To unsubscribe from this group and stop receiving \
emails from it, send an email to <a \
href="mailto:ossec-list%2Bunsubscribe@googlegroups.com" \
target="_blank">ossec-list+unsubscribe@googlegroups.com</a>.<br> For more options, \
visit <a href="https://groups.google.com/groups/opt_out" \
target="_blank">https://groups.google.com/groups/opt_out</a>.<br> \
</div></div></blockquote></div><br></div>
<p></p>
-- <br>
<br>
--- <br>
You received this message because you are subscribed to the Google Groups \
"ossec-list" group.<br> To unsubscribe from this group and stop receiving \
emails from it, send an email to <a \
href="mailto:ossec-list%2Bunsubscribe@googlegroups.com" \
target="_blank">ossec-list+unsubscribe@googlegroups.com</a>.<br> For more options, \
visit <a href="https://groups.google.com/groups/opt_out" \
target="_blank">https://groups.google.com/groups/opt_out</a>.<br> \
</div></div></blockquote></div><br></div>
<p></p>
-- <br>
<br>
--- <br>
You received this message because you are subscribed to the Google Groups \
"ossec-list" group.<br> To unsubscribe from this group and stop receiving \
emails from it, send an email to <a \
href="mailto:ossec-list%2Bunsubscribe@googlegroups.com" \
target="_blank">ossec-list+unsubscribe@googlegroups.com</a>.<br> For more options, \
visit <a href="https://groups.google.com/groups/opt_out" \
target="_blank">https://groups.google.com/groups/opt_out</a>.<br> \
</div></div></blockquote></div><br></div>
<p></p>
-- <br />
<br />
--- <br />
You received this message because you are subscribed to the Google Groups \
"ossec-list" group.<br /> To unsubscribe from this group and stop receiving \
emails from it, send an email to ossec-list+unsubscribe@googlegroups.com.<br /> For \
more options, visit <a \
href="https://groups.google.com/groups/opt_out">https://groups.google.com/groups/opt_out</a>.<br \
/>
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic