Search Results for "raw disk write"

...Frequently, attackers will leave a malicious process running but delete the original binary on disk. This query returns any process whose original binary has been deleted, which could be an indicator of a suspicious process.

ethflop is a DOS TSR that emulates a floppy disk drive. Such virtual floppy disk is, in fact, stored on a Linux server as a classic floppy image. All the communication between ethflop (the TSR) and ethflopd (the Linux daemon) is based on raw Ethernet. No need for any network configuration - the DOS PC only needs to have some kind of Ethernet adapter (physical or emulated, for example through PLIP) and a suitable packet driver.

This is Tkined/Scotty, A small footprint, easy too use, graphical and command line network management tool. It can be used for: * Monitoring and warning of failures of reachability in network attached devices * Monitoring disk usage/cpu utilization/network utilization of configured devices * Receiving alerts of equipment failures from configured devices * Recording alerts, response times, etc into a database ### More complex tasks * send and receive custom ICMP packets * query the Domain Name System (DNS) * access UDP sockets * probe and use some selected SUN RPCs * send and receive SNMP messages (SNMPv1, SNMPv2C, SNMPv3) * write special purpose SNMP agents in Tcl * parse and access SNMP MIB definitions * schedule jobs that are to be done regularly * realize event driven programming on network maps

...Its main features are: - it can reject viruses using Clam Antivirus (http://www.clamav.net); - it can check for spam using SpamAssassin (http://spamassassin.apache.org); - it can block emails with particular attachment extensions during the SMTP communication using Reformime (http://www.courier-mta.org/reformime.html); - it can "rate-limit" messages that an email address can send in a defined amount of time using an embedded db through SQLite (http://www.sqlite.org). Unlike other scanners for Qmail, such as Simscan or Qmail-Scanner which are inline scanners, Qexplore is an offline scanner that first write an email to a queue resident on disk, closing the qmail-smtpd communication. It than (offline) analyzes this email to check for virus and/or spam. This design solves the problem of highly traffic smtp servers in wich a lot of concurrent SMTP connections can deny access of incoming/outgoing emails because the system is busy.