[Aide] Identify Hackers

Richard van den Berg richard at vdberg.org
Thu Jan 24 14:03:33 EET 2008


MuraliPD at GMail wrote:
> How can check some other user entered into server and doing nasty things?

The concept of aide is to build a database with the properties of the 
files on your system first (when it is in a known good state). Later 
when you expect a breach (or on a regular basis) compare the current 
files against the properties in the database. Differences may (or may 
not) indicate something nasty happened.

Sincerely,

Richard van den Berg



More information about the Aide mailing list