{"id":2051,"date":"2009-10-06T10:44:53","date_gmt":"2009-10-06T10:44:53","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=2051"},"modified":"2015-09-09T19:37:53","modified_gmt":"2015-09-09T11:37:53","slug":"samhain-v-2-5-9c-open-source-host-based-intrusion-detection-system-hids","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2009\/10\/samhain-v-2-5-9c-open-source-host-based-intrusion-detection-system-hids\/","title":{"rendered":"Samhain v.2.5.9c &#8211; Open Source Host-Based Intrusion Detection System (HIDS)"},"content":{"rendered":"<p>[ad]<\/p>\n<p>We&#8217;ve only mentioned one HIDS before, that was <a href=\"https:\/\/www.darknet.org.uk\/2006\/05\/ossec-hids-open-source-host-based-intrusion-system\/\">OSSEC HIDS<\/a>, so I thought I&#8217;d do some updates on the others.<\/p>\n<p>Samhain has always been one of my favourites, before that of course I was using Tripwire like everyone else.<\/p>\n<p>The Samhain open source host-based intrusion detection system (HIDS) provides file integrity checking and logfile monitoring\/analysis, as well as rootkit detection, port monitoring, detection of rogue SUID executables, and hidden processes.<\/p>\n<p>It has been designed to monitor multiple hosts with potentially different operating systems, providing centralized logging and maintenance, although it can also be used as standalone application on a single host.<\/p>\n<p>Samhain is a multiplatform application for POSIX systems (Unix, Linux, Cygwin\/Windows).<\/p>\n<p><strong>Features<\/strong><\/p>\n<ul>\n<li>PCI DSS Compliance<\/li>\n<li>File integrity checks<\/li>\n<li>Host integrity monitoring<\/li>\n<li>Logfile monitoring\/analysis<\/li>\n<li>Log facilities<\/li>\n<li>Integration with other systems \/ Active response<\/li>\n<\/ul>\n<p>You can download Samhain here:<\/p>\n<p><a href=\"http:\/\/www.la-samhna.de\/samhain\/samhain-current.tar.gz\">samhain-current.tar.gz<\/a><\/p>\n<p><!--adsense#New468--><\/p>\n<p>Or read more <a href=\" http:\/\/www.la-samhna.de\/samhain\/\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>[ad] We&#8217;ve only mentioned one HIDS before, that was OSSEC HIDS, so I thought I&#8217;d do some updates on the others. Samhain has always been one of my favourites, before that of course I was using Tripwire like everyone else. The Samhain open source host-based intrusion detection system (HIDS) provides file integrity checking and logfile [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[12,11],"tags":[8862,544,756,546,174,122,8861],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/2051"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=2051"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/2051\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=2051"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=2051"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=2051"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}