SecureEXE 100% protection against compromised executables NT, commercial
Slogger: Secure Logger NT, freeware
Designed to replace the Event Logger, slogger implements a cryptographic protocol called PEO-1 that allows the remote auditing of system logs. Auditing remains possible even if an intruder gains superuser privileges i n the system, the protocol guarantees that the information logged before and during the intrusion process cannot be modified without the auditor (on a remote, trusted host) noticing.