|
Revision 670, 1.3 kB
(checked in by chengyu, 2 years ago)
|
honeybow sensor mwwatcher component first public release.
|
| Line | |
|---|
| 1 |
1. INTRODUCTION |
|---|
| 2 |
|
|---|
| 3 |
MwWatcher is a program which monitors file system changes in a honeypot and |
|---|
| 4 |
catches potential malware. It consists of one executable file, one config file |
|---|
| 5 |
and one dynamic link libary file. It runs only under Windows system. |
|---|
| 6 |
|
|---|
| 7 |
MwWatcher is a free software, released under the GPL; see the file LICENSE.TXT for |
|---|
| 8 |
details. However, the monitor libary it depends on is not released under GPL and |
|---|
| 9 |
is forbidden for any commercial use; see source files for details. |
|---|
| 10 |
|
|---|
| 11 |
2. QUICK START |
|---|
| 12 |
|
|---|
| 13 |
Install and double click the MwWatcher.exe file to begin monitor. |
|---|
| 14 |
|
|---|
| 15 |
For more information, please read MwWatcher Manual. |
|---|
| 16 |
|
|---|
| 17 |
3. REQUIREMENTS |
|---|
| 18 |
|
|---|
| 19 |
To run MwWatcher, you must have: |
|---|
| 20 |
|
|---|
| 21 |
MFC dynamic link library version 6.2.4131.0 (contains in the install package) |
|---|
| 22 |
|
|---|
| 23 |
4. SETUP |
|---|
| 24 |
|
|---|
| 25 |
Enter the \bin directory, double click to intall it. |
|---|
| 26 |
|
|---|
| 27 |
5. CONFIGURATION |
|---|
| 28 |
|
|---|
| 29 |
If your honeypot configuration is different from the default one, config MwWatcher.ini |
|---|
| 30 |
with a text editor (e.g. notepad) |
|---|
| 31 |
|
|---|
| 32 |
Edit the variables at in the config file to fit your configuration. For more information, |
|---|
| 33 |
please read MwWatcher Manual. |
|---|
| 34 |
|
|---|
| 35 |
6. GETTING MORE INFORMATION |
|---|
| 36 |
|
|---|
| 37 |
If you have any question about MwWatcher or have bug(s) found, please write to |
|---|
| 38 |
|
|---|
| 39 |
Song Chengyu |
|---|
| 40 |
songchengyu@icst.pku.edu.cn |
|---|
| 41 |
cs@mwcollect.org |
|---|
| 42 |
Jianwei Zhuge |
|---|
| 43 |
zhugejianwei@icst.pku.edu.cn |
|---|
| 44 |
|
|---|
| 45 |
The Artemis Project (Chinese Honeynet Project) |
|---|
