Work at SourceForge, help us to make it a better place! We have an immediate need for a Support Technician in our San Francisco or Denver office.

Close

Question about Tripwire change

Help
Anonymous
2012-06-12
2013-04-30

  • Anonymous
    2012-06-12

    Hi folks, I am trying to track down a change to an added data stream.  The logs have:

    Element: D:\Somefolder\somedata

    Stream Count old value = 0
                new value = 1
       
        Stream SHA-1 old value = da39a3ee5e6b4b0d3255bfef95601890afd80709
                new value = 6f01b86dc3a5fc07f2fc8743a88abb1720aa3376

    I've checked the element at question and have run couple tools against the directories and have found no added data streams.  Are these false positives or is something actually changing?  I've also checked the date stamps on all files and nothing has been touched in the time frame mentioned.  Any clues?