« Previous 1 2 3 4
Manipulation detection with AFICK
Checker
Conclusions
AFICK is not only quick to install, it is reasonably fast. A short command or a couple of clicks in the user interface are all it takes to check the system – assuming you have a workable configuration file, which takes more than just a few minutes to put together. Additionally, AFICK requires Perl and normally runs on the system it is supposed to monitor. With these limitations, AFICK cannot claim to be a full-fledged intrusion detection system, but it is nevertheless a useful component in a holistic security strategy.
Infos
- ActivePerl distribution: https://www.activestate.com/products/perl/
- AFICK at SourceForge: https://sourceforge.net/projects/afick/files/afick/
- AFICK config man page: http://afick.sourceforge.net/afick.conf.5.html
« Previous 1 2 3 4
Buy this article as PDF
(incl. VAT)
Buy ADMIN Magazine
US / Canada
UK / Australia
Related content
-
Program GUIs in Go with Fyne
In Go, which was originally developed for system programming, graphical user interfaces were not typically necessary. But a relatively new toolkit, Fyne, lets programmers build platform-independent GUIs for Go programs. -
Extended File Attributes
One way to store metadata is with the originating file in extended file attributes.
-
Discover ransomware with PowerShell
Simple backup strategies cannot protect files encrypted by ransomware, because they can be affected as well. A PowerShell script can ensure that your files are okay before sending them to backup. -
GNU Parallel: Multicore at the Command Line with GNU Parallel
GNU Parallel brings the benefits of multicore processing to the command line.
-
Parallel Versions of Familiar Serial Tools
Even with tons of cores per node today, the traditional sets of tools are still serial-only, utilizing a single core; however, some of the more popular tools have parallel versions, allowing you to use the extra cores either to run the same command in parallel or to perform the same task across multiple nodes.