Re: tool for checking compromised box

2003-08-03 Thread Karsten M. Self
on Fri, Aug 01, 2003 at 08:21:14AM +0800, Louie Miranda ([EMAIL PROTECTED]) wrote: > Hello, > > Is there any Debian package that can check a compromised box? As previously noted, chkrootkit is one pallative. Note that once a box is suspect, your trust in any of its output is equally suspect. Y

Re: tool for checking compromised box

2003-07-31 Thread ScruLoose
On Fri, Aug 01, 2003 at 08:21:14AM +0800, Louie Miranda wrote: > Hello, > > Is there any Debian package that can check a compromised box? I imagine it depends on what kind of "compromised" you're looking for. chkrootkit springs to mind if you think you've been rooted. integrit or tripwire are pr