[prev in list] [next in list] [prev in thread] [next in thread] 

List:       security-basics
Subject:    RE: Operative System Updates
From:       "Morey, Adam" <adam.morey () nist ! gov>
Date:       2012-06-15 14:10:58
Message-ID: 19A5B9B932A73B498BEA0F2818F25B730BE579B0FF () MBCLUSTER ! xchange ! nist ! gov
[Download RAW message or body]


Try Open Source Tripwire for Lnx, it's designed to baseline your file system, should \
work fine for system update/change management.

For Windows try an MSI builder, you can monitor registry and file system \
modifications, no need for long analysis.  You can create a new MSI package \
immediately after the update is completed, then inspect the resultant file, the \
builder will have an editor to open MSI package to edit them - it's designed to work \
between reboots too which is essential.  It's a manual process, but very simple with \
just one software tool, which works best when installed on a remote server and run \
from a share - run the builder to scan the system, patch/reboot/patch, run the \
builder and scan again to create the msi, open the msi to review all file, registry, \
ddl registration, txt file content changes.....  There is a free one in the Tools dir \
on the Windows2003 CD (WinInstall LE), there are several free starter packages out \
there as well.  

adam




-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com] On Behalf Of \
                haZard0us
Sent: Thursday, June 14, 2012 1:46 PM
To: security-basics@securityfocus.com
Subject: Operative System Updates

Hi all,

I need to create a script that gathers information of the OS before and after the \
updates in order to detect changes and which updates/service packs were used.

To be honest, I really don't know where to start. So, my question is which \
information should i gather in order to detect correctly which files were changed and \
which updates were used.

Thanks in advance.

--haZ
------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate In this guide we examine \
the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL \
works, how it benefits your company and how your customers can tell if a site is \
secure. You will find out how to test, purchase, install and use a thawte Digital \
Certificate on your Apache web server. Throughout, best practices for set-up are \
highlighted to help you ensure efficient ongoing management of your encryption keys \
and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL \
certificate.  We look at how SSL works, how it benefits your company and how your \
customers can tell if a site is secure. You will find out how to test, purchase, \
install and use a thawte Digital Certificate on your Apache web server. Throughout, \
best practices for set-up are highlighted to help you ensure efficient ongoing \
management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


[prev in list] [next in list] [prev in thread] [next in thread]