General discussion

Locked

Intrusion Detection

By joel ·
Running NT4 workstation. My company has it setup so that technicians can "whack" into all worksations by clicking START, RUN, and then typing \\computername\c$. I'm pretty sure someone in particular in the office is using this to scour my hard drive on my computer. I'm looking for a way to monitor this activity so I can know for sure if it is happening and who is doing it.

Any ideas?

This conversation is currently closed to new comments.

10 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Intrusion Detection

by shawn.flarity In reply to Intrusion Detection

http://www.neoworx.com/
install neowatch. Works as a intrusion detector.

Collapse -

Intrusion Detection

by joel In reply to Intrusion Detection

Poster rated this answer

Collapse -

Intrusion Detection

by joshg In reply to Intrusion Detection

Joel,

Heres my list of favorites:
BlackICE Pro www.netice.com
Centrax www.cybersafe.com
CyberCop Server www.nai.com
Desktop Sentry www.ntobjectives.com
Intact www.pedestalsoftware.com
Intruder Alert (ITA) www.axent.com
Kane Securtiy Monitor www.securitydynamics.com
RealSecure www.iss.net
SeNTry www.missioncritical.com
SessionWall-3 www.platinum.com
Tripwire for NT www.tripwiresecurity.com

Most of these places will let you download and try. Hope this helps.

Collapse -

Intrusion Detection

by joel In reply to Intrusion Detection

Poster rated this answer

Collapse -

Intrusion Detection

by Mikel~T In reply to Intrusion Detection

go to zonealarm.com, and download their personal firewall. This will allow you to monitor which machines/users are attempting to logon to your computer via the network. It keeps a log as well, so you can review the log at any time to see who has been naughty, and who has been nice.

Good luck.

Mike

Collapse -

Intrusion Detection

by joel In reply to Intrusion Detection

Poster rated this answer

Collapse -

Intrusion Detection

by zchris In reply to Intrusion Detection

delete the share!

if you want to permanently delete the share you have to edit your registry.

here's the key:

hklm\system\currentcontrolset\services\lanmanserver\parameters\autosharewks=0

good luck

Collapse -

Intrusion Detection

by zchris In reply to Intrusion Detection

but if you really want a firewall download "tiny personal firewall" (www.tinysoftware.com) it's free and only 1mb

Collapse -

Intrusion Detection

by joel In reply to Intrusion Detection

None of these answers helped. I cannot delete the share as it is a requirement on our network. I will not spend a lot of money on packaged software, nor can I "technically" put it on without breaking company rules. I was hoping for a small program that ran in the background that would monitor access and let me know who's accessing.

Collapse -

Intrusion Detection

by joel In reply to Intrusion Detection

This question was closed by the author

Back to Windows Forum
10 total posts (Page 1 of 1)  

Related Discussions

Related Forums