I saw this a few months ago on the midnight blogs, but i forgot to post about it. They have made a live cd to correlate traffic patterns of malware on a network. They then report on it by severity, event log pointers, and names of infections. Time to stop procrastinating and check it out
http://www.bothunter.netWhat is BotHunter
BotHunter is a passive network monitoring tool designed to recognize the communication patterns of malware-infected computers within your network perimeter. Using an advanced infection-dialog-based event correlation engine (patent pending), BotHunter represents the most in-depth network-based malware infection diagnosis system available today.
News Items and General Discussion About EH-Net : Change is Coming to EH-Net!!
