Here are a couple of Windows tools for security analysis (some cost money) that I came across recently in a presentation and some others I have laying around:

• Ethereal — sniffer
• Hex Workshop — Hex editor
• NetScan Tools Pro — network analyzer
• Packet Builder — packet builder
• KeyHost Logger — hardware keystroke logger
• Specter Honeypot — honeypot for Windows
• Brutus Password Cracker — password cracker
• Everest — system auditing tool
• Cain and Abel — the mother of all tools
• Ettercap — arp poisoning, MIM attacks
• LanGuard Network Security Scanner — scans and maps networks
• HTTP Sniffer — reassembles HTTP traffic on local LAN
• IDA Pro disassembler — the best disassembler out there.
• Sam Spade for Windows — Variety of network auditing tools packaged together.
• Foundstone Free Tools — a couple of nice web penetration and other tools here.
• Netstumbler — wireless auditing
• eEye Retina Scanners — tools to scan network for specific Windows vulnerabilities

Google just released a “Google Mini” search appliance aimed at small and medium sized businesses. For only $5,000, you can get a 1U server that will crawl your Intranet or Internet site, up to 50,000 documents of 220 file types. Very handy and inexpensive, plus the advantage is that it will crawl your website and create an index of your ColdFusion applications as well, instead of Verity grabbing the documents off of the file system.

Google Mini FAQ

I hope to purchase a couple of these at work.