Package: samhain (4.1.4-2 and others)

[ Source: samhain  ]

Data integrity and host intrusion alert system

Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected on memory using steganography.

Main features

    * Complete integrity check
         + uses cryptographic checksums of files to detect
           modifications,
         + can find rogue SUID executables anywhere on disk, and
    * Centralized monitoring
         + native support for logging to a central server via encrypted
           and authenticated connections
    * Tamper resistance
         + database and configuration files can be signed
         + logfile entries and e-mail reports are signed
         + support for stealth operation

Tags: System Administration: Monitoring, User Interface: Command Line, interface::daemon, role::program, Scope: Utility, Security: Intrusion Detection, security::integrity, use::monitor

Other Packages Related to samhain

• dep: debconf (>= 1.2.9)

  Debian configuration management system

  or debconf-2.0

  virtual package provided by cdebconf, cdebconf-udeb, debconf

• dep: libauparse0 (>= 1:2.2.1)

  Dynamic library for parsing security auditing

• dep: libc6 (>= 2.27)

  GNU C Library: Shared libraries
  also a virtual package provided by libc6-udeb

• dep: libpcre3

  Old Perl 5 Compatible Regular Expression Library - runtime files

• dep: libprelude28

  Security Information and Events Management system [ Base library ]

Download samhain

Download for all available architectures

Architecture	Version	Package Size	Installed Size	Files
ppc64el	4.1.4-2+b2	1,175.4 kB	3,047.0 kB	[list of files]