Samhain (software)
{{Short description|Security software}}
{{multiple issues|
{{more citations needed|date=October 2014}}
{{notability|Products|date=October 2014}}
}}
{{Infobox software
| name = Samhain
| logo =
| screenshot =
| caption =
| developer = Samhain Services
| latest release version = 4.4.10
| latest release date = {{Start date and age|2023|05|14}}{{cite web|url=https://www.la-samhna.de/samhain/s_download.html|title=Samhain File Integrity/Intrusion Detection System - Download|website=Samhain Labs|accessdate=22 August 2023}}
| genre = Security, Monitoring, HIDS
| license = GNU General Public License
| website = [http://www.la-samhna.de/samhain/ la-samhna.de/samhain]
| operating_system = Linux, all POSIX/UNIX Systems, Microsoft Windows
| programming language = C{{cite web|url=https://bazaar.launchpad.net/~ubuntu-branches/ubuntu/vivid/samhain/vivid/files/head:/src/|title=files for revision 17|publisher=Launchpad.net|accessdate=15 June 2017}}
}}
Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected in memory, using steganography.
Main features
- Complete integrity check
- uses cryptographic checksums of files to detect modifications,
- can find rogue SUID executables anywhere on a disk, and
- Centralized monitoring
- native support for logging to a central server via encrypted and authenticated connections
- Tamper resistance
- database and configuration files can be signed
- log file entries and e-mail reports are signed
- support for stealth operation
See also
{{Portal|Free Software}}
References
{{reflist}}
External links
- [http://la-samhna.de/samhain/ Samhain Homepage]
{{DEFAULTSORT:Samhain (Software)}}
Category:Unix security-related software
Category:Intrusion detection systems
Category:Free security software programmed in C
{{security-software-stub}}