Samhain (software)
This article has multiple issues. Please help or discuss these issues on the talk page. (Learn how and when to remove these template messages)
|
Developer(s) | Samhain Services |
---|---|
Stable release | 4.4.3
/ October 31, 2020[1] |
Written in | C[2] |
Operating system | Linux, all POSIX/UNIX Systems, Microsoft Windows |
Type | Security, Monitoring, HIDS |
License | GNU General Public License |
Website | la-samhna.de/samhain |
Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected in memory, using steganography.
Main features[]
- Complete integrity check
- uses cryptographic checksums of files to detect modifications,
- can find rogue SUID executables anywhere on a disk, and
- Centralized monitoring
- native support for logging to a central server via encrypted and authenticated connections
- Tamper resistance
- database and configuration files can be signed
- log file entries and e-mail reports are signed
- support for stealth operation
See also[]
References[]
- ^ "Samhain File Integrity/Intrusion Detection System - Download". Samhain Labs. Retrieved 9 December 2020.
- ^ "files for revision 17". Launchpad.net. Retrieved 15 June 2017.
External links[]
Categories:
- Privacy software
- Unix security-related software
- Intrusion detection systems
- Free security software programmed in C
- Computer security software stubs