Jump to content
Sign in to follow this  

Cisco Security Agent and AutoIt

Recommended Posts


Does anyone out there use Cisco Security Agent ( http://www.cisco.com/en/US/products/sw/secursw/ps5057/index.html )? My security guys are testing it, and have come to me saying that it is reporting that my AutoIt scripts are accessing the Outlook OST file when they run. None of the scripts have anything to do with the OST files, which would mean that the engine would have to be doing it, if at all. I don't think AutoIt is doing anything with the OST; I suspect it's a false positive by CSA, but I need to test to find out for sure.

I've used windows files auditing and process monitor to watch what they access when they run and have found nothing, but I'm curious if anyone else has seen this. I'd also be happy to use some other file monitoring tools if anyone knows of any other free/open source alternatives. Any help is appreciated.

Share this post

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this