File Integrity Checkers
When a system is compromised an attacker will often alter certain key files to provide continued access and prevent detection. By applying a message digest (cryptographic hash) to key files and then checking the files periodically to ensure the hash hasn’t altered a degree of assurance is maintained. On detecting a change an alert will be triggered. Furthermore, following an attack the same files can have their integrity checked to assess the extent of the compromise.
CimTrak Integrity and Compliance Suite
Visit the Product Site
CimTrak is a comprehensive file integrity monitoring and compliance software application that is easy to use and less expensive then similar solutions. CimTrak’s automated detection process, flexible response options, and auditing capabilities make it a ...
AIDE (Advanced Intrusion Detection Environment)
Visit the Product SiteAIDE (Advanced Intrusion Detection Environment) is a free replacement for Tripwire. It does the same things as the semi-free Tripwire and more. It creates a database from the regular expression rules that it finds from the config file. Once this data ...
chkrootkit
Visit the Product Sitechkrootkit is a tool to locally check for signs of a rootkit. [talisker] I used to list all the files it checked as well as all the rootkits it detected. Nelson has taken this product to become a huge project with too many features to list please check ou ...
integrit
Visit the Product Siteintegrit is an alternative to file integrity verification programs like tripwire and aide. It helps you determine whether an intruder has modified a computer system. Without a system like integrit, a sysadmin can't know whether the tools he/she uses to in ...
Osiris
Visit the Product SiteOsiris is a file integrity management system that periodically monitors one or more hosts for change. It maintains detailed logs of changes to the file system, user and group lists, resident kernel modules, and more. Osiris can be configured to email thes ...
samhain
Visit the Product Sitesamhain is an open source file integrity and host-based intrusion detection system for Linux and Unix. It can run as a daemon process, and and thus can remember file changes - contrary to a tool that runs from cron, if a file is modified you will get only ...
Tripwire
Visit the Product SiteTripwire for Servers lets organizations regain configuration control of servers and desktop machines by alerting IT to improper change to key system files, directories and registries. Organizations first manually configure each monitored server and deskto ...
Verisys Popular
Visit the Product Site
Verisys is an advanced system and file integrity monitoring solution for Windows that allows you to maintain the integrity of business critical files and data by detecting unauthorised changes. Verisys is easily configured to suit your requirements using ...
NNT Change Tracker
Visit the Product Site
NNT Change Tracker™ conducts an initial inventory of all filesystems specified and ‘fingerprints’ all files using secure hashing technology, generating a unique checksum for each file. The system will then audit all files being tracked on a scheduled b ...
