Windows

Our forums are currently in maintenance mode and the ability to post is disabled. We will be back up and running as soon as possible. Thanks for your patience!

General discussion

Locked

Intrusion Detection

By joel ·
Running NT4 workstation. My company has it setup so that technicians can "whack" into all worksations by clicking START, RUN, and then typing \\computername\c$. I'm pretty sure someone in particular in the office is using this to scour my hard drive on my computer. I'm looking for a way to monitor this activity so I can know for sure if it is happening and who is doing it.

Any ideas?

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

Intrusion Detection

by shawn.flarity In reply to Intrusion Detection

http://www.neoworx.com/
install neowatch. Works as a intrusion detector.

Collapse -

Intrusion Detection

by joel In reply to Intrusion Detection

Poster rated this answer

Collapse -

Intrusion Detection

by joshg In reply to Intrusion Detection

Joel,

Heres my list of favorites:
BlackICE Pro www.netice.com
Centrax www.cybersafe.com
CyberCop Server www.nai.com
Desktop Sentry www.ntobjectives.com
Intact www.pedestalsoftware.com
Intruder Alert (ITA) www.axent.com
Kane Securtiy Monitor www.securitydynamics.com
RealSecure www.iss.net
SeNTry www.missioncritical.com
SessionWall-3 www.platinum.com
Tripwire for NT www.tripwiresecurity.com

Most of these places will let you download and try. Hope this helps.

Collapse -

Intrusion Detection

by joel In reply to Intrusion Detection

Poster rated this answer

Collapse -

Intrusion Detection

by Mikel~T In reply to Intrusion Detection

go to zonealarm.com, and download their personal firewall. This will allow you to monitor which machines/users are attempting to logon to your computer via the network. It keeps a log as well, so you can review the log at any time to see who has been naughty, and who has been nice.

Good luck.

Mike

Collapse -

Intrusion Detection

by joel In reply to Intrusion Detection

Poster rated this answer

Collapse -

Intrusion Detection

by zchris In reply to Intrusion Detection

delete the share!

if you want to permanently delete the share you have to edit your registry.

here's the key:

hklm\system\currentcontrolset\services\lanmanserver\parameters\autosharewks=0

good luck

Collapse -

Intrusion Detection

by zchris In reply to Intrusion Detection

but if you really want a firewall download "tiny personal firewall" (www.tinysoftware.com) it's free and only 1mb

Collapse -

Intrusion Detection

by joel In reply to Intrusion Detection

None of these answers helped. I cannot delete the share as it is a requirement on our network. I will not spend a lot of money on packaged software, nor can I "technically" put it on without breaking company rules. I was hoping for a small program that ran in the background that would monitor access and let me know who's accessing.

Collapse -

Intrusion Detection

by joel In reply to Intrusion Detection

This question was closed by the author

Related Discussions

Related Forums