File system integrity checker
Samhain is a file system integrity checker that can be used for both single hosts and networks. You can trace what changes have occurred in your system, when they occurred, and who was logged in at the time. The program uses cryptographic checksums to monitor file integrity and detect unauthorized modifications of a file system. It's designed for tamper resistance, even if an intruder has obtained root privileges. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, tamper-resistant log file, and syslog) are available.
DocumentationUser manual in PDF format included
released on 31 October 2016
24 January 2017
Leaders and contributors
Resources and communication
This entry (in part or in whole) was last reviewed on 27 February 2018.