Seismic Intrusion Detection

In this day of increased hacker attempts and virus activity enterprises are implementing multi-layered security strategies to guard against unwanted and potentially harmful security breaches. This multi-layered approach involves both network and host based security practices involving various...

It is known that the browser helper objects are loaded each time the browser is started up. Such objects run in the same memory context as the browser and can perform any action on the available windows and modules. For ex., a browser helper object can install hooks to monitor messages and...

Raw Fake AP is a program that emulates valid IEEE 802.11 access points using wireless raw injection. Raw Fake AP application aims to create both beacon and probe response frames and could be used to "hide" real networks from novice wardrivers or for testing wireless intrusion detection systems..


Platforms: *nix

ArpCacheWatch monitors Windows ARP cache and allows to send an ARP request to obtain the physical address that corresponds to the specified destination IP address. The ARP cache contains IP/MAC translations so that every time an IP packet are to be sent, the MAC address doesn't have to queried...


Platforms: Windows

Kismet application is an 802.11 layer2 wireless network detector, sniffer, and intrusion detection system. Kismet will work with any wireless card which supports raw monitoring (rfmon) mode, and can sniff 802.11b, 802.11a, and 802.11g traffic. Kismet identifies networks by passively collecting...


Platforms: *nix

Server Monitor is a Windows service that monitors the health and availability of Windows servers, network services (on Windows, Linux and other operating systems), and devices. No agents are needed to monitor remote servers. Server Monitor can watch: Event logs on local and remote Windows...


Platforms: Windows

ShareAlarmPro is a network tool that allows network administrators and users to easily perform network shares monitoring. Using ShareAlarmPro you can monitor users attempting to access secured shares and confidential files, detect and log network access to shared folders, monitor security events,...


Platforms: Windows

Protection for personal data is needed now more than ever. My Firewall Plus is an advanced, bi-directional intrusion defense system that's both easy to use and configure. My Firewall Plus protects your computer by stopping malicious hackers and other intruders from gaining access to your system...


Platforms: Windows

Packit is a network auditing tool that allows you to monitor, manipulate, and inject customized IP traffic into your network. This can be valuable for testing firewalls, intrusion detection systems, port scanning, and general TCP/IP auditing.


Platforms: *nix

NetShareWatcher is network security improvement software. It allows network administrators to monitor network shares and identify shares which are violating the data access policy of their organization. NetShareWatcher is very handy. Once you configure it a first time, you can forget about...


Platforms: Windows

IeCacheExplorer displays the details of all cookies that Internet Explorer stores on your computer and reads all information from the history file on your computer, displays the list of all URLs that you have visited. It also allows you to clear history, delete cookies and temporary internet...


Platforms: Windows

Snort project is a "lightweight" intrusion detection technology in comparison to commercially available systems. Snort really isnt very hard to use, but there are a lot of command line options to play with, and its not always obvious which ones go together well. This file aims to make using...


Platforms: *nix

RegistryProt is a 100% free, standalone, compact, low-level realtime registry monitor and protector, that adds another dimension to Windows security and intrusion detection. By monitoring important locations and keys in the Windows system registry, RegistryProt will alert whenever a key is added...


Platforms: Windows

Fragroute intercepts, modifies, and rewrites egress traffic destined for a specified host, implementing most of the attacks described in the Secure Networks "Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection" paper of January 1998. Fragroute features a simple...


Platforms: *nix

Snort Report is an add-on module for the Snort Intrusion Detection System. Snort Report add-on provides realtime reporting from the MySQL database generated by Snort. It has been tested on Redhat 6.2, 7.0, 7.1, and OpenBSD 2.9.. Symmetrix Technologies is a complete network integrator and...


Platforms: *nix

Network Security Toolkit is a bootable ISO live CD and its based on Fedora Core 2. The toolkit was designed to provide easy access to best-of-breed Open Source Network Security Applications and should run on most x86 platforms. The main intent of developing this toolkit was to provide the...


Platforms: *nix

Security Center is network security software for real-time intrusion detection and prevention that helps to protect networks from potential intruders, unauthorized network connections and malicious network activities. Security Center key features are: Online network discovery, Automatic...


Platforms: Windows

Registry Auditor gives you a quick look at the Adware, malware and spyware installed on your computer including parasites and trojans. Registry Auditor tells you by colored icons ( green icon - safe, yellow icon - unknown, red icon - harmful ) whether specific Objects are known to be safe or...


Platforms: Windows

Firestorm is an extremely high performance network intrusion detection system (NIDS). At the moment it just a sensor but plans are to include real support for analysis, reporting, remote console and on-the-fly sensor configuration. It is fully pluggable and hence extremely flexible. Firestorm...


Platforms: *nix

KNOPPIX-NSM is dedicated to providing a framework for individuals wanting to learn about Network Security Monitoring. We have tryed to do most of the hard work to help get the beginner/newbie up and running fast so they spend more time learning about NSM, leaving the details as a later exercise...


Platforms: *nix