Network Security Auditing tools

pts.
Tags:
Management
Microsoft Windows
OS
Security
Servers
SQL Server
Hi all - I'm hoping somebody out there might have a suggestion for me. My company unfortunately falls under Sarbanes Oxley and we need to audit all of the network directory security. The down side of this (ok well it's all down) is that we are a small company, no money to spend on getting the really nice packages and that we are closing in on the audit time (2 months away). I have the time to spend to locate something that will help in this and was hoping somebody out there might have some suggestions. I have been starting to look at Somarsoft DumpSec program which seems to do some of what I need - but is there a way in Server 2003 to get the information on the groups and what they have access to? Hopefully I'm just missing the obvious. Thanks Lirria

Answer Wiki

Thanks. We'll let you know when a new response is added.

You are there – DumpSec will provide the reports for permissions and about groups. I always save as Tab separated text files (.txt). If you use comma separated your columns get messed up in the import to excel whenever the data contains a comma (i.e. lastname, jr.)

The multitude of reports and the mass of data can be daunting. I am HIPAA and GLB but not Sarb-Ox and DumpSec gives us everything we need with some manual labor. I also use LogLasso to acquire logs from the various workstations and process using Log Parser 2.2. Both are free, LogLasso from Log Logic, and Log Parser from Microsoft. You will have to develope your own scripts to cut down the manual work.

Good luck.

Discuss This Question: 1  Reply

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Lirria
    Good to know - I'll spend some time playing with it then and see if I can figure out all the things it dumps. Thanks for the input! Lirria
    0 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following