AIDE

wikipedia:Advanced Intrusion Detection Environment

• To update DB: aide -c --update

Configuration

• Ubuntu: /etc/aide/aide.conf Examples: https://rfxn.com/downloads/cron.aide, https://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/app-forensics/aide/files/aide.cron
• ArchLinux: /etc/aide.conf

Usage

• Initialize database: aideinit
• Check configuration: aide -D
• Check systems: aide -c /etc/aide/aide.conf -C
• Update DB: aide -u

Jan 26 16:23:34 SERVER systemd-logind[876]: Failed to save user data /run/systemd/users/0: No space left on device

See also

• Audit: acct, atop, tripwire, AIDE, auditd, debsums, AWS Cloudtrail, logwatch, logcheck, Google Santa, Coguard
• Linux logging, Cisco IOS logging