We are looking into installing a host intrusion detection system on a Windows 2008 R2 web server.
Our requirements are, at least for the time being, that the system needs to be standalone and also affordable (a bit vague I know), preferably free.
Some of the most recommended solutions fail short of these requirements: - Tripwire: too costly. - OSSEC: Only has a windows agent, cannot run the manager under windows.
I've been looking into other solutions such as AFICK, Verisys, etc. Just hoping to hear from other peoples experiences.