Tripwire

Overview

What is it?

Tripwire is an open-source program that monitors file integrity. It performs a check of the filesystem state against a known baseline state, and alerts on changes that are detected.

Tripwire can monitor file contents, but also permissions, ownership, or directories.

Installing

Tripwire is present in the official Debian repositories:

sudo apt-get -y update
sudo apt-get -y install tripwire

Installing Tripwire walks you through a multi-step setup process. Manual steps are covered on the Tripwire Readme: https://github.com/Tripwire/tripwire-open-source