Alphabetical List of Audit Products

Timberline Technologies Logo
HOME SECURITY PRODUCT LINKS SECURITY RESOURCES

SECURITY WORKSHOPS SECURITY ADVISORY LINKS CONTACT INFORMATION

CONSULTING SERVICES SECURITY NEWS LINKS SITE MAP

New from Timberline Technologies:

Database Encryption Workshop

Tell me more ...

Alphabetical List of

Audit Products

Disclaimer:

These links are provided as a free service to those seeking commercial information security products or shareware tools. The fact that a product is listed here is not an indication that Timberline Technologies LLC has evaluated it nor that we recommend it. The descriptive text is generally taken from the vendor's own product literature. The buyer has the ultimate responsibility to ensure that the information security product is suitable for its intended use. Please follow the links to the vendor pages to obtain more detailed information on a particular product. Additional guidance on product selection can be found in the On-Site Security Workshops.

Vendors Please Note: If your product does not appear in this index or if you feel that it has been incorrectly categorized please contact webmaster@timberlinetechnologies.com and the error will be corrected.

Important Note to Surfers: Timberline Technologies takes strict precautions to provide "safe" links. We will not knowingly provide a link to a site with dangerous active content or questionable privacy policies. Nevertheless, we can not guarantee the safety of all links provided. Those who are concerned about browsing securely are advised to use the facilities of BeHidden, safeWeb, Anonymizer or similar service.

Product Name Description

AppDetectivePro (Application Security) The leading database scanning and vulnerability assessment solution for global auditors and IT advisors. AppDetectivePro conducts a thorough examination of databases that store and process critical business information, identifies vulnerabilities and misconfigurations, reviews user rights, and enables auditors and advisors to complete these task quickly, reliably, and cost effectively. AppDetectivePro is supported on the following platforms: Oracle; Microsoft SQL Server; DB2 LUW; DB2 z/OS and OS/390; Sybase; MySQL; and Lotus Notes/Domino.

Auditron400 (DSS) Auditron400 is designed to track and report modifications made to sensitive data over any AS400 database at the field level. The application captures the "before & after" images of the data alterations and reports the complete job information providing a detailed data audit trail in the efforts to ensure As400 data integrity is maintained.

Binaudit (CERIAS) Free audit software.

Historian (Fortres Grand) A single solution for recording, auditing, and reporting computer use. Historian tracks a number of activities independently of each other. Historian can, at the administrator's discretion, record application usage, file access and operations, Internet Web page access, user activity, job costing information, and pages sent to a printer. Consists of two separate functional components, a recorder and a reporter. The recording component runs as a system service. It starts invisibly as soon as the machine starts and continues to silently operate in the background. The recording component is a very efficient, optimized service which does all intensive processing only when the machine is idle. No decrease in performance should be noticed while the recorder is running. The reporter is a multiple document application which allows the usage information to be displayed in a variety of way. Additionally, the reporter has export capabilities to place usage information in standard data formats for custom queries and aggregation with third party data manipulation tools. Historians collection of useful usage information will fascinate you.

Log Check (CERIAS) Free UNIX log scanning software. Logcheck is software package that is designed to automatically run and check system log files for security violations and unusual activity. Logcheck utilizes a program called logtail that remembers the last position it read from in a log file and uses this position on subsequent runs to process new information.

LogRhythm (LogRhythm) LogRhythm's comprehensive log management and analysis software helps companies to efficiently comply with government regulations, secure their networks and optimize their IT infrastructure. By automating the collection, organization, analysis and archival of all log data, LogRhythm enables enterprises to easily comply with log data retention regulations while simultaneously gaining valuable, timely and actionable insights into security, availability, performance and audit issues within their infrastructure.

NTLast (CERIAS) Free improved version of event viewer.

Secure4Audit (S4Software) System auditing varies considerably between UNIX systems and often lacks tools for configuration. Secure4Audit provides a simple, easy-to-use interface from which system auditing can be controlled and configured on some of the most popular UNIX platforms. Secure4Audit also integrates easily with other account and access control products, making the system administrator's job that much easier.

SPAR (CERIAS) Free audit log reduction tool developed at Texas A&M University.

Telemate.Net (Telemate.Net Software) Provide your management team with valuable reports that record and reflect the enterprise network and web site usage activities.

Vanguard Analyzer (Vanguard Integrity Professionals) Comprehensive system integrity verification and auditing tool, providing OS/390 assessment, risk identification and threat analysis, as well as specific instructions on how to fix problems. Vanguard Analyzer captures critical OS/390 system information creating a baseline. Then, at any time, you can command Vanguard Analyzer to perform an Audit-By-Exception to compare your current system against this baseline. Vanguard Analyzer performs an in-depth review of your current OS/390 system and identifies exposures. It makes it easy to perform OS/390 technical audits for improved systems integrity and quality assurance. Vanguard Analyzer provides management with the detailed audit findings they require to assure the integrity of critical corporate information.

Vanguard Reporter (Vanguard Integrity Professionals) IBM OS/390 security event analyzer and reporting software. Gathers data from the OS/390 System Management Facility (SMF) and IBM’s Security Server (RACF), to provide a broad range of data mining and reporting capabilities.

HOME	SECURITY PRODUCT LINKS	SECURITY RESOURCES
SECURITY WORKSHOPS	SECURITY ADVISORY LINKS	CONTACT INFORMATION
CONSULTING SERVICES	SECURITY NEWS LINKS	SITE MAP

Product Name	Description
AppDetectivePro (Application Security)	The leading database scanning and vulnerability assessment solution for global auditors and IT advisors. AppDetectivePro conducts a thorough examination of databases that store and process critical business information, identifies vulnerabilities and misconfigurations, reviews user rights, and enables auditors and advisors to complete these task quickly, reliably, and cost effectively. AppDetectivePro is supported on the following platforms: Oracle; Microsoft SQL Server; DB2 LUW; DB2 z/OS and OS/390; Sybase; MySQL; and Lotus Notes/Domino.
Auditron400 (DSS)	Auditron400 is designed to track and report modifications made to sensitive data over any AS400 database at the field level. The application captures the "before & after" images of the data alterations and reports the complete job information providing a detailed data audit trail in the efforts to ensure As400 data integrity is maintained.
Binaudit (CERIAS)	Free audit software.
Historian (Fortres Grand)	A single solution for recording, auditing, and reporting computer use. Historian tracks a number of activities independently of each other. Historian can, at the administrator's discretion, record application usage, file access and operations, Internet Web page access, user activity, job costing information, and pages sent to a printer. Consists of two separate functional components, a recorder and a reporter. The recording component runs as a system service. It starts invisibly as soon as the machine starts and continues to silently operate in the background. The recording component is a very efficient, optimized service which does all intensive processing only when the machine is idle. No decrease in performance should be noticed while the recorder is running. The reporter is a multiple document application which allows the usage information to be displayed in a variety of way. Additionally, the reporter has export capabilities to place usage information in standard data formats for custom queries and aggregation with third party data manipulation tools. Historians collection of useful usage information will fascinate you.
Log Check (CERIAS)	Free UNIX log scanning software. Logcheck is software package that is designed to automatically run and check system log files for security violations and unusual activity. Logcheck utilizes a program called logtail that remembers the last position it read from in a log file and uses this position on subsequent runs to process new information.
LogRhythm (LogRhythm)	LogRhythm's comprehensive log management and analysis software helps companies to efficiently comply with government regulations, secure their networks and optimize their IT infrastructure. By automating the collection, organization, analysis and archival of all log data, LogRhythm enables enterprises to easily comply with log data retention regulations while simultaneously gaining valuable, timely and actionable insights into security, availability, performance and audit issues within their infrastructure.
NTLast (CERIAS)	Free improved version of event viewer.
Secure4Audit (S4Software)	System auditing varies considerably between UNIX systems and often lacks tools for configuration. Secure4Audit provides a simple, easy-to-use interface from which system auditing can be controlled and configured on some of the most popular UNIX platforms. Secure4Audit also integrates easily with other account and access control products, making the system administrator's job that much easier.
SPAR (CERIAS)	Free audit log reduction tool developed at Texas A&M University.
Telemate.Net (Telemate.Net Software)	Provide your management team with valuable reports that record and reflect the enterprise network and web site usage activities.
Vanguard Analyzer (Vanguard Integrity Professionals)	Comprehensive system integrity verification and auditing tool, providing OS/390 assessment, risk identification and threat analysis, as well as specific instructions on how to fix problems. Vanguard Analyzer captures critical OS/390 system information creating a baseline. Then, at any time, you can command Vanguard Analyzer to perform an Audit-By-Exception to compare your current system against this baseline. Vanguard Analyzer performs an in-depth review of your current OS/390 system and identifies exposures. It makes it easy to perform OS/390 technical audits for improved systems integrity and quality assurance. Vanguard Analyzer provides management with the detailed audit findings they require to assure the integrity of critical corporate information.
Vanguard Reporter (Vanguard Integrity Professionals)	IBM OS/390 security event analyzer and reporting software. Gathers data from the OS/390 System Management Facility (SMF) and IBM’s Security Server (RACF), to provide a broad range of data mining and reporting capabilities.