Tripwire
From James's Wiki
sudo apt install tripwire
setpassphrases ect during install
sudo tripwire --init
sudo tripwire --check
after editing the policy file do this:
sudo twadmin -m P /etc/tripwire/twpol.txt
sudo tripwire --init
sudo tripwire --check
