RE: 10 more ways to detect computer malware
I did not read all the posts so maybe Komodo Lab's Newt was already listed as a tool for baselining. You can run Newt for free on up to 25 Nodes.
I am with a SMB that has over 25 nodes but less than 25 machines (not counting test boxes) and so by creating a custom scan of only production PCs and servers (25), the systems are scanned at least 1x per week and the results exported to a MS Access dB so everything can be reported on easily applying appropriate filters. It records detailed services and applications. (For over 25 nodes it's not too bad either, it's $295 for up to 75 nodes and plus free lifetime updates. Prices go up from there.)
