El Jefe: free program for process-centric intrusion detection

From http://holisticinfosec.blogspot.com/2011/02/el-jefe-boss-will-see-you-know.html:

 

@ MrBrian

Thanks Looks interesting. From what i can gather though, it "appears" to be used in conjunction with VM, is this correct ?

 

You're welcome .

Yes, apparently it requires VMWare Player or VMWare Workstation to run the server on.

Here are details on the Intrusion section (from the manual):

 

@ MrBrian

Thanks for the confirmation, and extra info Could be Very useful indeed to those that have VM

Be nice if you, and/or others, had time to test it and give us your results. I don't have VM so i can't !

 

Thanks alot @MrBrian for bringing this up .... i guess it's like Remnux and zerowine stuff but more friendly interface specially the client thing
i am downloading it now to give it a try

PS : tested... as i can tell, it isnt worth to download 1 Gb for simple analyzing like this ..i expected more details but nothing
i tested it with virus sality, stuxnet and zeus samples
besides client caused some problem to my operation system which made me move to try it in VM (i dont know if this move was wrong to test it)
maybe i couldnt get all features it still has

if someone else tried it, please post ur feedback