Elkeid is a high-performance, open-source Host-Based Intrusion Detection System (HIDS) built by ByteDance to secure Linux workloads across cloud, container, and hybrid environments. If tools like OSSEC or Snort feel dated in your K8s stack or Falco is too noisy, Elkeid offers a modern alternative with eBPF-based syscall monitoring, Kafka-backed pipelines, and plugin-driven detection logic. […]
hids
Integrit – File Verification System
Integrit is a file verification system, a simple yet secure alternative to products like tripwire. It has a small memory footprint, uses up-to-date cryptographic algorithms, and has features that make sense (like including the MD5 checksum of newly generated databases in the report). The Integrit system detects intrusion by detecting when trusted files have been […]
Tiger – Unix Security Audit & Intrusion Detection Tool
Tiger is a Unix security audit tool that can be use both for auditing and as an intrusion detection system. It supports multiple Unix platforms and it is free and provided under a GPL license. Unlike other tools, Tiger needs only POSIX tools and is written entirely in shell language. Tiger has some interesting features […]
Graphical Web Interface for OSSEC WUI AnaLogi v1.1
‘Analytical Log Interface’ was built to sit on top of OSSEC (built on OSSEC 2.6) and requires 0 modifications to OSSEC or the database schema that ships with OSSEC. AnaLogi requires a Webserver sporting PHP and MySQL. Written for inhouse analysis work, released under GPL to give something back – it’s intended to help you […]
Samhain v.2.5.9c – Open Source Host-Based Intrusion Detection System (HIDS)
[ad] We’ve only mentioned one HIDS before, that was OSSEC HIDS, so I thought I’d do some updates on the others. Samhain has always been one of my favourites, before that of course I was using Tripwire like everyone else. The Samhain open source host-based intrusion detection system (HIDS) provides file integrity checking and logfile […]