Jump to content
Sign in to follow this  
Frog

Cisco Security Agent and AutoIt

Recommended Posts

Frog

Does anyone out there use Cisco Security Agent ( http://www.cisco.com/en/US/products/sw/secursw/ps5057/index.html )? My security guys are testing it, and have come to me saying that it is reporting that my AutoIt scripts are accessing the Outlook OST file when they run. None of the scripts have anything to do with the OST files, which would mean that the engine would have to be doing it, if at all. I don't think AutoIt is doing anything with the OST; I suspect it's a false positive by CSA, but I need to test to find out for sure.

I've used windows files auditing and process monitor to watch what they access when they run and have found nothing, but I'm curious if anyone else has seen this. I'd also be happy to use some other file monitoring tools if anyone knows of any other free/open source alternatives. Any help is appreciated.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.