Patriot NG (HIDS)

[io.kent]

Patriot NG

Patriot is a 'Host IDS' tool which allows real time monitoring of changes in Windows systems or Network attacks.

Patriot monitors:

•Changes in Registry keys: Indicating whether any sensitive key (autorun, internet explorer settings...) is altered.

•New files in 'Startup' directories

•New Users in the System

•New Services installed

•Changes in the hosts file

•New scheduled jobs

•Alteration of the integrity of Internet Explorer: (New BHOs, configuration changes, new toolbars)

•Changes in ARP table (Prevention of MITM attacks)

•Installation of new Drivers

•New Netbios shares

•TCP/IP Defense (New open ports, new connections made by processes, PortScan detection...)

•Files in critical directories (New executables, new DLLs...)

•New hidden windows (cmd.exe / Internet Explorer using OLE objects)

•Netbios connections to the System

•ARP Watch (New hosts in your network)

•NIDS (Detect anomalous network traffic based on editable rules)

Important: You need WinPcap · Download to run Patriot NG[*] Install it first

Windows XP, Windows Vista, Windows 7 (32Bits) ---> http://sbdtools.googlecode.com/files/PatriotNG2.01.zip

Windows XP, Windows Vista, Windows 7 (64Bits) ---> http://sbdtools.googlecode.com/files/PatriotNG2.0164.zip

[BlackJokerKode]

Foarte tare programul,chiar foarte folositor.

[io.kent]

mie imi merge bine de tot! si chiar e bun, va recomand acest program.

[Guest Kovalski]

Asta arata destul de util programul, bravo.

[eusimplu]

Cat consuma din CPU? Cu cat incetineste internetul?

[raynor009]

Decompiling time!