Talk With an Expert

The SirEG Toolkit

The SirEG Toolkit (PDF, 4.21MB)Published: 23 Apr, 2009
Created by:
Francois Begin

While there is a lot of literature on the subject of gathering data and assessing whether or not a host has been compromised, there are very few tools to help someone perform these tasks quickly and efficiently, particularly on Solaris hosts. The SirEG (Solaris incident response Evidence Gathering) Toolkit has been designed to fill this gap. It consists of bash scripts that can help security professionals respond to potential compromises of Solaris servers.