OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: cyber cop
From: Preston Hogue (PrestonHCONCUR.COM)
Date: Wed Jun 14 2000 - 11:31:31 CDT

     If you are considering cybercop you should really consider buying the
entire suite. The suite includes and entire honeypot network which
unfortunately only runs on NT (Honey pot boxes: Solaris boxes, NT, Cisco
routers). The suite also comes with host based intrusion detection for both
NT and Solaris (unfortunately only 2.6 right now) The scanner itself can
run on both NT and Rethat Linux (last version I know they support is 5.2).
The scanner "excluding freeware" products in my opinion is the best out on
the market. The scanner comes with a great tool called CASL witch also you
to create your own packets. Overall if you are just looking for a scanner,
there are plenty of freeware scanners that can get the job done. If your
looking for an entire suite, cybercop is the best that I have tried out.

Preston Hogue

-----Original Message-----
From: Stephen Winson [mailto:froodTXCONNECT.COM]
Sent: Tuesday, June 13, 2000 3:34 PM
To: FOCUS-MSSECURITYFOCUS.COM
Subject: Re: cyber cop

CyberCop is the best commercial scanner I've used so far. It
easily makes alot of pretty reports and other things that the bosses
like to see. If I had money that was sepcifically earmarked for a
commercial scanner, I would definitely go with it.

However, the purist solution is to learn the many and varied
freeware tools that are out there. Also (and this you should do
whatever tool you use) do as much research on your own into
opoular security flaws and security in general. Finding out a
particular port is open or CGI script is accessible is next to
useless if you don't know what that means or why it's dangerous,
or whether it's something that you have to take the risk on 'cause
you need that functionality for some reason.

Stephen Winson

On 12 Jun 2000, at 16:37, Travis Baker wrote:

> How good of a security auditor is Cyber Cop? If this is not a good
product
> what is, and where do i find it?
>
>
> Thanks
>
> T,