Tripwire: Difference between revisions

From James's Wiki
(Created page with " sudo apt install tripwire setpassphrases ect during install sudo tripwire --init sudo tripwire --check after editing the policy file do this: sudo twadmin -m P /etc/...")
 
No edit summary
Line 15: Line 15:


  sudo tripwire --check
  sudo tripwire --check
==References==
https://www.howtoforge.com/tutorial/how-to-monitor-and-detect-modified-files-using-tripwire-on-ubuntu-1604/
https://www.digitalocean.com/community/tutorials/how-to-use-tripwire-to-detect-server-intrusions-on-an-ubuntu-vps

Revision as of 17:44, 24 February 2018

sudo apt install tripwire

setpassphrases ect during install

sudo tripwire --init
sudo tripwire --check


after editing the policy file do this:

sudo twadmin -m P /etc/tripwire/twpol.txt
sudo tripwire --init
sudo tripwire --check

References

https://www.howtoforge.com/tutorial/how-to-monitor-and-detect-modified-files-using-tripwire-on-ubuntu-1604/

https://www.digitalocean.com/community/tutorials/how-to-use-tripwire-to-detect-server-intrusions-on-an-ubuntu-vps