Tripwire
From charlesreid1
Overview
What is it?
Tripwire is an open-source program that monitors file integrity. It performs a check of the filesystem state against a known baseline state, and alerts on changes that are detected.
Tripwire can monitor file contents, but also permissions, ownership, or directories.
Installing
Tripwire is a bit of a pain to install, but here's the basic steps:
First, install using aptitude, since it is present in the official Debian repositories:
sudo apt-get -y update sudo apt-get -y install tripwire
Installing Tripwire walks you through a multi-step setup process. Manual steps are covered on the Tripwire Readme: https://github.com/Tripwire/tripwire-open-source
one of the things Tripwire does is configure postfix (a mail server) to send alert messages.
Flags
