Samhain (software)
 | This article has multiple issues. Please help improve it or discuss these issues on the talk page. (Learn how and when to remove these messages)
|
| Samhain | |
|---|---|
| Developer | Samhain Services |
| Stable release | 4.5.3
/ October 31, 2025[1] |
| Written in | C[2] |
| Operating system | Linux, all POSIX/UNIX Systems, Microsoft Windows |
| Type | Security, Monitoring, HIDS |
| License | GNU General Public License |
| Website | la-samhna.de/samhain |
Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected in memory, using steganography.
Main features
[edit]- Complete integrity check[3]
- uses cryptographic checksums of files to detect modifications,
- can find rogue SUID executables anywhere on a disk, and
- Centralized monitoring
- native support for logging to a central server via encrypted and authenticated connections[3][4]
- Tamper resistance[3]
See also
[edit]
References
[edit]- ↑ "Samhain File Integrity/Intrusion Detection System - Download". Samhain Labs. Retrieved 16 March 2026.
- ↑ "files for revision 17". Launchpad.net. Retrieved 15 June 2017.
- 1 2 3 Armstrong, Del (2003). "An Introduction To File Integrity Checking On Unix Systems: With an Example Deployment Using the No-Cost Samhain File Integrity Checker". SANS Institute. pp. 13–14. Retrieved 2026-10-01.
- 1 2 Lesko, Matt (2003-08-05). "Host-based intrusion detection with samhain". Linux.com. Retrieved 2026-10-01.
- ↑ Nel, Martinus (2014-04-23). "Samhain: Host Based Intrusion Detection via File Integrity Monitoring". SANS Institute. Retrieved 2026-10-01.
External links
[edit]
 | This security software article is a stub. You can help Wikipedia by adding missing information. |