Timeline for Tripwire - Is it security Theater?
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 4, 2012 at 18:00 | history | edited | Rory Alsop♦ | CC BY-SA 3.0 |
added 150 characters in body
|
| Jan 4, 2012 at 17:28 | comment | added | Rory Alsop♦ | I have seen many installations check real-time (or as close to it as to make the delay unnoticable) - it depends how widespread your Tripwire needs to be. If you are monitoring millions of files you can't do this. | |
| Jan 4, 2012 at 17:03 | comment | added | dr jimbob | Do typical configurations of tripwire compute hashes of files on a scale where installation of a rootkit would be noticed (where an installation may take minutes)? I was under the impression the hash of any particular file would be checked at most hourly; but more likely daily/weekly. | |
| Jan 4, 2012 at 7:38 | history | answered | Rory Alsop♦ | CC BY-SA 3.0 |