What is Tripwire used for?
Tripwire is an intrusion detection system (IDS), which, constantly and automatically, keeps your critical system files and reports under control if they have been destroyed or modified by a cracker (or by mistake). It allows the system administrator to know immediately what was compromised and fix it.
How do you set up a Tripwire?
The following steps should be taken to properly install, use and maintain Tripwire: Install Tripwire and customize the policy file — If not already done, install the tripwire RPM (see the Section called RPM Installation Instructions). Then, customize the sample configuration (/etc/tripwire/twcfg.