Patriot is a 'Host IDS' tool which allows real time monitoring of changes in Windows systems or Network attacks. Patriot monitors: changes in Registry keys: Indicating whether any sensitive key (autorun, internet explorer settings...) is altered, new files in 'Startup' directories, new users in the system, alteration of the integrity of Internet Explorer, changes in ARP table, New open ports, new connections made by processes, PortScan detection, detect anomalous network traffic based on editable rules.
Comments