From: Jason (cisspstudy@yahoo.com)
Date: Thu May 09 2002 - 19:03:02 EDT
I need to scan to see:
1. If there are any trojans running on these hosts.
2. Whether shares are activated on these hosts.
3. Whether anti-virus is installed.
I will have domain administrator rights and all
workstations are in the windows NT 4.0 domain.
What tools do people recommend for performing each of these
steps? I will be scanning for workstations within a
specific IP range.
For Trojan Scanning I have seen tools like TFAK. But I am
not sure how good it is and I know it can't be run on a
block of IP's.
For determining whether shares are activated maybe I could
use something like Legion ?
For determining whether anti-virus is installed I need a
tool that can dump a list of services running on a remote
host for a block of IP addresses.
Any help appreciated.
----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:20 EDT