Anyone know of any good tools to Baseline Unix machines, oracle/sql databases, etc (anything non windows). The Microsoft Baseline analyzer is good for windows machines. The CIS tool is also good but you have to install it on the box. Scanners like Nessus and Retina are good for finding vulnrabilities but do not show deviation from a baseline. Sarbanes Oxley has required us to provide baselines on machines and we are stuck on the non-windows boxes.