Thursday, July 7, 2011

Incident Analyser: A Remote Malware Outbreak Analyser

second submission received via the PenTestIT Submit Your Tool. This is a submission by Mr. Beenu Arora who had previously submitted the Malware Analyser. Back to this tool – Incident Analyser is a freeware tool for responding to malware outbreak in an environment. The tool can be helpful in identifying the infected/suspected hosts in a large network.



The tool can perform the following tasks on list of IPs on a network:
Dumping list of active connections of a node.
Fetching list of network interfaces.
Dumping information of the running processes.
Fetching start-up items list along with actual files path.

Using this tool is very simple. It takes just one argument. Just see to it that you have the proper privileges and authorization credentials to do so.

1
IAnalyser
Download Incident Analyser v1.0 (Ianalyser.zip) here.

No comments: