Frog Posted July 16, 2009 Posted July 16, 2009 Does anyone out there use Cisco Security Agent ( http://www.cisco.com/en/US/products/sw/secursw/ps5057/index.html )? My security guys are testing it, and have come to me saying that it is reporting that my AutoIt scripts are accessing the Outlook OST file when they run. None of the scripts have anything to do with the OST files, which would mean that the engine would have to be doing it, if at all. I don't think AutoIt is doing anything with the OST; I suspect it's a false positive by CSA, but I need to test to find out for sure. I've used windows files auditing and process monitor to watch what they access when they run and have found nothing, but I'm curious if anyone else has seen this. I'd also be happy to use some other file monitoring tools if anyone knows of any other free/open source alternatives. Any help is appreciated.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now