Skip to content
Sections
>> Trisquel >> Packages >> nabia >> admin >> samhain
etiona  ] [  nabia  ] [  aramo  ]
[ Source: samhain  ]

Package: samhain (4.1.4-2build2)

Data integrity and host intrusion alert system

Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected on memory using steganography.

Main features

    * Complete integrity check
         + uses cryptographic checksums of files to detect
           modifications,
         + can find rogue SUID executables anywhere on disk, and
    * Centralized monitoring
         + native support for logging to a central server via encrypted
           and authenticated connections
    * Tamper resistance
         + database and configuration files can be signed
         + logfile entries and e-mail reports are signed
         + support for stealth operation

Other Packages Related to samhain

  • depends
  • recommends
  • suggests
  • dep: debconf (>= 1.2.9)
    Debian configuration management system
    or debconf-2.0
    virtual package provided by cdebconf, cdebconf-udeb, debconf
  • dep: libauparse0 (>= 1:2.2.1)
    Dynamic library for parsing security auditing
  • dep: libc6 (>= 2.27) [amd64]
    GNU C Library: Shared libraries
    also a virtual package provided by libc6-udeb
    dep: libc6 (>= 2.28) [armhf]
  • dep: libpcre3
    Old Perl 5 Compatible Regular Expression Library - runtime files
  • dep: libprelude28
    Security Information and Events Management system [ Base library ]

Download samhain

Download for all available architectures
Architecture Package Size Installed Size Files
amd64 1,136.7 kB2884 kB [list of files]
armhf 1,123.9 kB2685 kB [list of files]