Printable View
Curious about how tight your box is? If you're running Win 2k, 2k Pro, 2k Server, Solaris or Linux head over to CIS and download your FREE security benchmark tool. They don't have one posted for XP, and I can't try the 2k Pro version out yet cause I'm getting ready to wipe that partition and do a fresh install....I'm curious to see how poorly 2k Pro does fresh out of the box.
Looks interesting (and handy), so I thought I would share.
Thanks allenb1963, Nice security tools!
Nice find allenb1963, I'm scanning my personal laptop as I speak. This little tool looks to be pretty handy so far....
Good tools, I use these for setting/reviewing baseline security on customers machines. I have some issues with hfnetchk.exe not being completely accurate but thats a small issue compared with the bigger problem on inadequate security.
I AM DOWNLOADING IT TO CHECK MY WIN2K PRO AND KEEP POSTING SUCH GOOD ONES
Are there any *good* ones for Win 9x/Me that you know of?
AxessTerminated:
Not to be a smart ass... but, they probably didn't make one for 98 or ME because it has absolutely no security...
you need to pick a NT based m$ system for security.... (nt, 2k, xp, 2k3)
I believe that the NT/2000 portion contains XP sp1 capabilities also.
I am downloading it and will read the documentation in it.Quote:
WHAT'S NEW IN v2.1.9 of the CIS Scoring Tool?
* Update Service Pack and hotfix scoring to properly score Windows 2000 SP4, Windows XP SP1, and Windows 2003 server
* Include HFNetChk 3.86 (replacing HFNetChk 3.32>
* Update to RestrictAnonymous scoring for Windows XP/2003
* Add scoring of RestrictAnonymousSAM for Windows XP/2003
* Update to scoring of NoLMHash
* Update to Appendix C:Security Templates of the Implemenation Guide
* Include latest versions of all templates distributed with the tool, including the latest NIST, NSA, and Microsoft security templates
* Include updated Terms of Use Agreement
* Include updated security templates after synchronization of the benchmark and security emplates settings
* Minor bug fixes
CIS has also developed benchmarks for Various OS and even CISCO routers.. which I guess are good handy document for OS security personnel....
It gives detailed explanation of how to able / disable the parameter within the OS....
Thanks alen for sharing the info......