Samhain is a file system integrity checker that can be used for both single hosts and networks. You can trace what changes have occurred in your system, when they occurred, and who was logged in at the time. The program uses cryptographic checksums to monitor file integrity and detect unauthorized modifications of a file system. It's designed for tamper resistance, even if an intruder has obtained root privileges. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, tamper-resistant log file, and syslog) are available.
DocumentationUser manual in PDF format included
released on 31 October 2016
|License||Verified by||Verified on||Notes|
|GPLv2orlater||Genium||24 January 2017|
Leaders and contributors
Resources and communication
This entry (in part or in whole) was last reviewed on 24 January 2017.