How System Scrutiny works
Scrutiny allows for the searching of any number of different root directories and will search only the user subdirectories of these roots if instructed to do so. The search criteria allow for standard wild card matching of filename and extension in addition to searches based upon the creation date, size, attributes and initial characters of files. Creation date and Size allow system administrators to locate any copies of a program which had been found even if it had been renamed. The attributes option will return a list of files which have been set as hidden or system and may therefore arouse suspicion. Finally the initial characters option will find a any type of file by examining the file headers. For example executables start MZ and zip files PK. This will find illegal applications on a system even if they are of unknown origin. A separate module enables searches to be scheduled on a 24hr basis. |
