samhain is a file system integrity checker that can be used for both single hosts and networks. You can trace what changes have occurred in your system, when they occurred, and who was logged in at the time. The program uses cryptographic checksums to monitor file integrity and detect unauthorized modifications of a file system. It's designed for tamper resistance, even if an intruder has obtained root privileges. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, tamper-resistant log file, and syslog) are available.
DocumentationUser manual in PDF format included
released on 5 July 2005
|License||Verified by||Verified on||Notes|
|GPLv2||Janet Casey||20 March 2001|
Leaders and contributors
Resources and communication
This entry (in part or in whole) was last reviewed on 6 July 2005.