The suite of security tools provided by SPI effectively meet the problems faced by the user community and the goals originally outlined. Evaluates the release status of system binaries by comparing a crypto-checksum to provided table entries. No Windows NT equivalent.
Vendors often ship operating system updates later found to have introduced new security holes.
Subsequently, patches are offered to correct the vulnerability. BAT examines host file systems to identify known vulnerable system binaries and suggests the best patch or replacement binary to correct the problem. It is a powerful tool for recognizing Trojan Horses, because it immediately recognizes modified executables. BAT utilizes tables of file authentication and patch information provided by the SPI development team. Users may define various subsets of files and accounts, and specify for each of these which attributes are suitable for change detection reporting.