Sujet : file-integrity

• File integrity monitoring with AIDE: building the baseline, checking against it, and keeping the database off the host

  AIDE compares the live filesystem against a database it built earlier; aide --init creates that database, an operator must move it into place, and aide --check is only trustworthy if an attacker who altered the host could not also alter the stored baseline.

  methodology · en · reviewed · connaissances au 2026-09-24

Lisible par machine : JSON