[osiris-devel] monitoring host state

[Alexei_Roudnev]

For Windows, you need to monitor, at least,

 Users, 'Member Of', with names insted of group SID. I can find a code,
which allowed to extract such information (I wrote it in past - user, list
of groups).

It is not excellent, but works.


----- Original Message ----- 
From: "Brian Wotring" <brian at shmoo.com>
To: "Osiris Developers" <osiris-devel at lists.shmoo.com>
Sent: Monday, January 05, 2004 11:38 AM
Subject: [osiris-devel] monitoring host state


>
> Here is what we have so far.  I'm mostly concerned with the lack of any
> significant attributes on the Windows side.  If anyone knows of any way
> to expand this, now is the time.
>
> unix users: name,uid,gid,gecos,home,shell
> windows users: name, privs, home, flags, auth_flags
>
> unix groups:  group,gid
>
> For Windows, only  the name.  The LOCAL_GROUP_INFO structure contains
> only the name and the comment field.  Getting the gid and other
> attributes requires using NetGroupEnum(), which I have found to be
> unreliable for listing local group information.
>
> linux kmods:  same as output from lsmod
> darwin kexts: same as output from kextstat
> windows kmods (services):  name, display_name, status  (types
> SERVICE_WIN32)
>
> --
>      Brian Wotring ( brian at shmoo.com )
>      PGP KeyID: 0x9674763D
>
> _______________________________________________
> osiris-devel mailing list
> osiris-devel at lists.shmoo.com
> https://lists.shmoo.com/mailman/listinfo/osiris-devel
>