Tripwire: Difference between revisions
From James's Wiki
(Created page with " sudo apt install tripwire setpassphrases ect during install sudo tripwire --init sudo tripwire --check after editing the policy file do this: sudo twadmin -m P /etc/...") |
No edit summary |
||
Line 15: | Line 15: | ||
sudo tripwire --check | sudo tripwire --check | ||
==References== | |||
https://www.howtoforge.com/tutorial/how-to-monitor-and-detect-modified-files-using-tripwire-on-ubuntu-1604/ | |||
https://www.digitalocean.com/community/tutorials/how-to-use-tripwire-to-detect-server-intrusions-on-an-ubuntu-vps |
Revision as of 17:44, 24 February 2018
sudo apt install tripwire
setpassphrases ect during install
sudo tripwire --init
sudo tripwire --check
after editing the policy file do this:
sudo twadmin -m P /etc/tripwire/twpol.txt
sudo tripwire --init
sudo tripwire --check