Cybersecurity Professionals

CDE scoping, including identifying and defining where payment cards are stored, is critical for compliance. The following free and low-cost tools can be used to search your networks and systems for payment card data:

• SENF: https://security.utexas.edu/senf-sensitive-number-finder
• Powergrep: http://www.powergrep.com
• CCSRCH: https://adamcaudill.com/ccsrch/

Organizations are required to implement file-integrity monitoring tools that alert employees to unauthorized modifications of critical system, configuration, and content files. The following free file integrity monitoring tools can be used for this requirement:

• OSSEC: http://www.ossec.net (also does centralized logging and host IDS)
• Samhain: http://la-samhna.de/samhain (also does centralized logging and host IDS)
• Ftimes: http://ftimes.sourceforge.net/FTimes

• Samurai WTF: http://www.samurai-wtf.org/

• Nessus: https://www.tenable.com/
• Nmap: https://nmap.org/
• OpenVAS: http://www.openvas.org/
• Splunk: https://www.splunk.com/
• Qualys BrowserCheck: https://browsercheck.qualys.com/

Organizations may want to implement intrusion-detection systems (IDS) and/or intrusion-prevention systems (IPS) to monitor all traffic at the perimeter of the data environment (DE) and at critical points inside the DE. The following free IDS/IPS tools can be used for this requirement:

• OSSEC: http://www.ossec.net/
• Samhain: http://la-samhna.de/samhain
• Snort: http://www.snort.org
• Suricata: http://openinfosecfoundation.org/index.php/download-suricata
• ATT Cybersecurity: https://www.alienvault.com/products/ossim
• Open Onion: https://securityonion.net/

• Hardening Guides from Center for Internet Security
• Microsoft Security Compliance Manager
• MBSA
• Nessus
• Nmap

Network monitoring tools can be used to ensure that NIST-required controls and process (e.g. SSH, SLL) are correctly running. The following free network monitoring tools are often seen by Coalfire during PCI assessments:

• Nagios: http://www.nagios.org
• Zabbix: https://www.zabbix.com/
• APIC EM: https://developer.cisco.com/site/apic-em/
• OpenNMS: http://www.opennms.org
• Sguil: http://bammv.github.io/sguil/index.html

You can use the following free tools to manage passwords:

• Password Safe: http://passwordsafe.sourceforge.net/index.shtml
• Keepass: http://keepass.info
• Password Gorilla: https://github.com/zdia/gorilla/wiki

Organizations should regularly detect and identify wireless access points (WAPs) within their environments. The following free and low-cost tools can be used to detect and identify WAPs:

• Wireless netview: http://www.nirsoft.net/utils/wireless_network_view.html
• Kismet: http://www.kismetwireless.net
• Inssider Office: http://www.metageek.net/products/inssider-office
• Xirrus Wi-Fi Inspector (NOW CAMBIUM): https://www.cambiumnetworks.com/xirrus/