主题： file-integrity

• File integrity monitoring with AIDE: building the baseline, checking against it, and keeping the database off the host

  AIDE compares the live filesystem against a database it built earlier; aide --init creates that database, an operator must move it into place, and aide --check is only trustworthy if an attacker who altered the host could not also alter the stored baseline.

  methodology · en · reviewed · 知识截至 2026-09-24

机器可读： JSON