ROBUSTIFISERING:
Verktøy som øker robusthet for våre systemer: Alle verktøyene på denne siden er i kategorien FREEWARE
CobShield is a service application which solves two main problems: It monitors any service running on Windows NT/2000/XP and starts it if it is found stopped. That way, you can automatically re-start some important service if it crashes. You can choose the services to monitor and protect from a user friendly interface. The other job CobShield does is to automatically restart the computer at some scheduled times. The program creates a log file and have a mail alerter as an optional feature. CobShield is a service itself, and that's why it only can work on NT/2000/XP. HOW COBSHIELD WORKS CobShield is a service that starts automatically with Windows. The first 3 minutes after the start, CobShield will do nothing. That way, all your services will have enough time to start. After the third idle minute, CobShield will check every minute: 1) Your scheduled times. If it's time to restart the computer, CobShield will restart it. 2) CobShield will check that your selected services are running. If some of your checked services are down, CobShield will try to restart them. 3) When restarting the computer or a service, you can optionally get an e-mail with information about the event.
REDUNDANS:
SECURITY: Verktøy i forbindelse med oppklaring av innbrudd på maskiner
CurrPorts v1.02 - View Opened TCP/IP ports Description CurrPorts displays the list of all currently opened TCP/IP and UDP ports on your local computer. For each port in the list, information about the process that opened the port is also displayed, including the process name, full path of the process, version information of the process (product name, file description, and so on), the time that the process was created, and the user that created it. In addition, CurrPorts allows you to close unwanted TCP connections, kill the process that opened the ports, and save the TCP/UDP ports information to HTML file , XML file, or to tab-delimited text file. CurrPorts also automatically mark with pink color suspicious TCP/UDP ports owned by unidentified applications (Applications without version information and icons)
RootkitRevealer http://www.sysinternals.com/ntw2k/freeware/rootkitreveal.shtml RootkitRevealer is an advanced root kit detection utility. It runs on Windows NT 4 and higher and its output lists Registry and file system API discrepancies that may indicate the presence of a user-mode or kernel-mode rootkit. RootkitRevealer successfully detects all persistent rootkits published at www.rootkit.com, including AFX, Vanquish and HackerDefender (note: RootkitRevealer is not intended to detect memory-based rootkits like Fu that don't survive reboots).
Spybot Search & Destroy the best (according to PC World, PC Mag, Download.com...) privacy software available! http://www.safer-networking.org/en/index.html
Erfaringsnotater etter abuse-sak på EDRADOUR: Toolkit/Rutiner: * For analyse av netflow data (Resolve and substitute ip-addresses): attachment:lookupip.exe * Ha klart et imagings-system a'la Ghost. Slik at man kan ta et Snapshot før man starter arbeidet på maskinen (Sikring av bevis, gjenskaping av innbrudds-tilstand) * Zonealarm eller liknende for å oppdage dialers / trojan programmer som prøver å "ringe hjem".