Hello list, In the company I work for's ever expanding quest for PCI certification, I am told that we are required to have in place something to monitor all system files and log files for changes. Does anyone have any suggestions on software to do this? I am currently looking at Osiris but would like some input as to what is out there and actually being used by people.
On a funny note, I almost got myself in trouble today because the boss initially told me that the file monitoring was just for log files "to make sure they don't change". I guess my slightly flippant remark of "done, log files by definition always change, no need for monitoring" wasn't exactly what they were looking for and gained me the old "if you cant take this all more seriously..." speech. Oh well, guess they told me... Stuart van Zee [EMAIL PROTECTED]
