margolese  | 2007-09-23
Check your file integrity
I found Integrit to be simple to install and easy to use, designed to verify the file integrity on your system. If it discovers a modified file, it will let you know what was changed on the computer system. It’s useful for a sysadmin to know whether the tools used to investigate a potential break in are Trojans or not. If you have a temporary directory (/tmp/) on the machine, containing a shell that’s setuid root, and you would like to investigate it to determine how bad the machine has been compromised, how do you know that the attacker hasn't replaced your "find" and "ls" commands with tampered versions that fail to report the cracker's files? Integript provides the answer by creating a database, sort of like a “snapshot” of the most essential parts of your computer system. Keep the database safe, and in case something is changed, you are sure to track it and fix it as fast as possible. Powerful tool, aimed at the professional sysadmin.