Samhain (software) explained

Samhain
Developer:	Samhain Services
Latest Release Version:	4.4.10
Latest Release Date:	^[1]
Genre:	Security, Monitoring, HIDS
License:	GNU General Public License
Website:	la-samhna.de/samhain
Operating System:	Linux, all POSIX/UNIX Systems, Microsoft Windows
Programming Language:	C^[2]

Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected in memory, using steganography.

Main features

• Complete integrity check
  • uses cryptographic checksums of files to detect modifications,
  • can find rogue SUID executables anywhere on a disk, and
• Centralized monitoring
  • native support for logging to a central server via encrypted and authenticated connections
• Tamper resistance
  • database and configuration files can be signed
  • log file entries and e-mail reports are signed
  • support for stealth operation

See also

• Host-based intrusion detection system comparison

External links

• Samhain Homepage

Notes and References

1. Web site: Samhain File Integrity/Intrusion Detection System - Download. Samhain Labs. 22 August 2023.
2. Web site: files for revision 17. Launchpad.net. 15 June 2017.