ParentFull threadeverdayimhustln·Samhain is less well-known but superior to TW, AIDE and OSSEC. (I've deployed both FOSS and commercial TW.)http://www.la-samhna.de/library/scanners.htmlhttp://www.la-samhna.de/samhain/s_faq.htmlView on HN