Software Map

AccTail shows extended resource usage
information for all processes that have exited,
unlike top or ps which only detail currently
executing processes. It can be useful in
combination with wtmptail or MultiTail.

This patch integrates SecurID authentication services directly into the OpenSSH daemon, allowing users to use SecurID tokens directly as their passwords instead of relying on the clunky sdshell. It rides on the plain password auth architecture in OpenSSH to avoid requiring ChallengeResponse or securid-1@ssh.com style auth. It supports full privilege separation.

x509watch is a simple command line application that can be used to list soon expiring or already expired X.509 certificates, such as SSL certificates. All certificates are searched by default in the standard PKI directory, but any other directory can be specified as a parameter. Only Base64 encoded DER and PEM X.509 certificates are supported.

ifstat is a tool to report network interface
bandwith just like vmstat/iostat do for other
system counters. It can monitor local interfaces
by polling the kernel counters, or remote hosts'
interfaces using SNMP.

op allows fine-grained control of access to super-user privileges
through easy-to-remember mnemonics. It features user- and host-based
access control, command expiration, netgroup support, drop-in
configuration files, and more.

KeyOS is an integrated IT management platform compliant with the principles behind ISO 20000. Easily expandable through a plugins system, it provides a wide set of management consoles and dashboards, and interoperability with other tools used by system administrators. It provides a Windows and Linux agent to provide inventory and monitoring of hardware assets, a Centreon-Nagios connector, monitoring for anti-virus and backup programs, remote assistance, a help-desk and ticketing system with request routing, escalation, and SLA management, VoIP integration, automated translation, time-sheets, and intervention reports, and more.

LCD4Linux is a small program that grabs information from the kernel and some subsystems and displays it on an external liquid crystal display.

changedfiles is a framework for filesystem replication, security monitoring, and/or automatic file transformations--essentially any application where you'd poll files or directories and either do something to them or send them somewhere else (or both). The difference is that the kernel tells you when they change instead of you having to poll. It's an easy real time FTP push mirror to one or multiple sites. It's also a full fledged MySQL client, so you can do realtime database operations (for example, batch imports). It consists of two parts: a kernel module (works with Linux kernel version 2.4) which reports to a device whenever a file on the filesystem changes, and a daemon which runs in user space and can be configured to do almost any action when a change to a file matching the one of the patterns it looks for is reported. The kernel module is SMP safe and has been tested on Intel, PowerPC, and Alpha.

Advisory Check is a program that reads security advisories for you. It gathers security advisories using RSS, RDF, or XML feeds, compares them against the installed software, and alerts you if you're vulnerable.
A wide variety of package managers can be queried to detect installed software. Remote systems can be monitored by using the integrated SSH, Windows-RPC, and Nmap support.

MIDAS NMS is a highly configurable network
monitoring and network intrusion detection
server. It uses a distributed client/server
model that allows it to scale to very large
networks, and features highly optimized Snort
support that dramatically reduces the
overhead of both the Snort Sensor and the
alert data repository. It also supports
Netsaint/Nagios plugins and Big Brother
clients, allowing for easy migration.

Rover provides a means of executing commands on remote machines via SSH, Telnet, or Rlogin. Connections are made and then managed using the Expect for Perl module. Rover can process many hosts in parallel. It comes with two interface programs, rover and rovergtk. The first is a command line tool with a built-in shell and batching capabilities; the other uses a Gtk interface to configure and use Rover.

FIRE, the Forensic and Incident Response Environment, (formerly known as Biatchux) is a portable, bootable CD-ROM-based distribution providing an immediate environment for performing forensics analysis, data recovery, virus scanning, and pen-testing. It also provides the necessary tools for live forensics/analysis/incident response.

The freePBX (formerly Asterisk Management Portal)
project brings together best-of-breed applications
to produce a standardized implementation of
Asterisk, complete with Web-based administrative
interface.

Vbackup is a modular backup utility that can be used to perform full or incremental system backups. It consists of a set of scripts that can be used to create backups using tar and xfsdump. It can also make backups of PostgreSQL, MySQL, and LDAP databases, keep a copy of the boot record, the partition table, or the LVM configuration, encrypt archives using x509 certificates, and back up the Debian package list and the RPM database. It can store the backups in a local or remote directory using either NFS or SCP. It is modular, and can be extended to perform other functions as well.