| Key | Value |
|---|---|
| FileName | ./etc/logrotate.d/samhain |
| FileSize | 556 |
| MD5 | AA5A1154B3F381D4A4B3B1C3636045D2 |
| SHA-1 | 07928FC7EE79297F8B9F86ACD6E7FC1B78427689 |
| SHA-256 | C24FBD85C18242B674EFF005BB6188ECE4BD7DA345B42B072F71F19C0928A08F |
| SSDEEP | 6:EJInHaFNaIlMvdNQ2FFUZtefWAW717nRYnKSzBmFlMB1FxXMJLQAW71ynmOePFVW:gIaOdNd/U2fHW4zBylA56W4mLICzbW |
| TLSH | T1ADF0E54D26413E213BE0C82E4D3B9A8922434077ED661D2279CDF7A6DF4F15472A4365 |
| hashlookup:parent-total | 32 |
| hashlookup:trust | 100 |
The searched file hash is included in 32 parent files which include package known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileSize | 1167930 |
| MD5 | 3263D85BD189E8CD17677D682EA0D333 |
| PackageDescription | Data integrity and host intrusion alert system Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected on memory using steganography. . Main features * Complete integrity check + uses cryptographic checksums of files to detect modifications, + can find rogue SUID executables anywhere on disk, and * Centralized monitoring + native support for logging to a central server via encrypted and authenticated connections * Tamper resistance + database and configuration files can be signed + logfile entries and e-mail reports are signed + support for stealth operation |
| PackageMaintainer | Javier Fernández-Sanguino Peña <jfs@debian.org> |
| PackageName | samhain |
| PackageSection | admin |
| PackageVersion | 4.1.4-2 |
| SHA-1 | 031E305F8527ACE04B433B458DAD2093A86B0A8D |
| SHA-256 | F66323E03D71A74192F51640ADEED5F6FD1E9EA1231167FFAFA5EB5CD70FA678 |
| Key | Value |
|---|---|
| FileSize | 1208190 |
| MD5 | EAA73AD60DBEA27FBDC27423125AACDF |
| PackageDescription | Data integrity and host intrusion alert system Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected on memory using steganography. . Main features * Complete integrity check + uses cryptographic checksums of files to detect modifications, + can find rogue SUID executables anywhere on disk, and * Centralized monitoring + native support for logging to a central server via encrypted and authenticated connections * Tamper resistance + database and configuration files can be signed + logfile entries and e-mail reports are signed + support for stealth operation |
| PackageMaintainer | Javier Fernández-Sanguino Peña <jfs@debian.org> |
| PackageName | samhain |
| PackageSection | admin |
| PackageVersion | 4.1.4-2+b1 |
| SHA-1 | 03DC37D8A8E7B148741765882383B822391D19EE |
| SHA-256 | D7DBBD581A3A8A3DDB2A7829B5AAB13FB19B8600EACD252E3BE20A40CA3DF8B2 |
| Key | Value |
|---|---|
| FileSize | 1204796 |
| MD5 | 44F2047070569576D8A84DF3183DAF52 |
| PackageDescription | Data integrity and host intrusion alert system Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected on memory using steganography. . Main features * Complete integrity check + uses cryptographic checksums of files to detect modifications, + can find rogue SUID executables anywhere on disk, and * Centralized monitoring + native support for logging to a central server via encrypted and authenticated connections * Tamper resistance + database and configuration files can be signed + logfile entries and e-mail reports are signed + support for stealth operation |
| PackageMaintainer | Javier Fernández-Sanguino Peña <jfs@debian.org> |
| PackageName | samhain |
| PackageSection | admin |
| PackageVersion | 4.1.4-2+b2 |
| SHA-1 | 0F4E23469D446F06502BC869F0187F52EC5056F9 |
| SHA-256 | 658F5F087CE7E2D11B7E5DFB520A5DCB05A353C535B1372E301EA4BD6961FE32 |
| Key | Value |
|---|---|
| FileSize | 1152266 |
| MD5 | D01A3B16549FBCCCBFB6AC913674CA55 |
| PackageDescription | Data integrity and host intrusion alert system Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected on memory using steganography. . Main features * Complete integrity check + uses cryptographic checksums of files to detect modifications, + can find rogue SUID executables anywhere on disk, and * Centralized monitoring + native support for logging to a central server via encrypted and authenticated connections * Tamper resistance + database and configuration files can be signed + logfile entries and e-mail reports are signed + support for stealth operation |
| PackageMaintainer | Javier Fernández-Sanguino Peña <jfs@debian.org> |
| PackageName | samhain |
| PackageSection | admin |
| PackageVersion | 4.1.4-2 |
| SHA-1 | 13F1B22E37FB57B529453E41EE0532C9B1D21E6A |
| SHA-256 | C6153CB9979C915472CFE1A037BC59747C8D6C8BD76DCA1202C847312F5356E0 |
| Key | Value |
|---|---|
| FileSize | 1165744 |
| MD5 | 3A517AE69873098D836BC0CD197F2010 |
| PackageDescription | Data integrity and host intrusion alert system Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected on memory using steganography. . Main features * Complete integrity check + uses cryptographic checksums of files to detect modifications, + can find rogue SUID executables anywhere on disk, and * Centralized monitoring + native support for logging to a central server via encrypted and authenticated connections * Tamper resistance + database and configuration files can be signed + logfile entries and e-mail reports are signed + support for stealth operation |
| PackageMaintainer | Javier Fernández-Sanguino Peña <jfs@debian.org> |
| PackageName | samhain |
| PackageSection | admin |
| PackageVersion | 4.1.4-2+b2 |
| SHA-1 | 172CA835B8C0415A61DB371CE2770C81077FE025 |
| SHA-256 | 7ED35CD57992D01D90DB9F32090FF0923EF3C22F4851BA421EF2F2E4BB9BFE79 |
| Key | Value |
|---|---|
| FileSize | 1195876 |
| MD5 | 37B20698B1A04AFAC7A813BBE5DCFC68 |
| PackageDescription | Data integrity and host intrusion alert system Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected on memory using steganography. . Main features * Complete integrity check + uses cryptographic checksums of files to detect modifications, + can find rogue SUID executables anywhere on disk, and * Centralized monitoring + native support for logging to a central server via encrypted and authenticated connections * Tamper resistance + database and configuration files can be signed + logfile entries and e-mail reports are signed + support for stealth operation |
| PackageMaintainer | Javier Fernández-Sanguino Peña <jfs@debian.org> |
| PackageName | samhain |
| PackageSection | admin |
| PackageVersion | 4.1.4-2+b2 |
| SHA-1 | 1D29077B062D43A518787BEC83982FF99769CFFF |
| SHA-256 | AB4103040066D50B4209341EA23A96CF6BA124BDB943551B4E2C8D9FBECF7172 |
| Key | Value |
|---|---|
| FileSize | 1167092 |
| MD5 | 5B7AA146F163188E4F68FE15844F7466 |
| PackageDescription | Data integrity and host intrusion alert system Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected on memory using steganography. . Main features * Complete integrity check + uses cryptographic checksums of files to detect modifications, + can find rogue SUID executables anywhere on disk, and * Centralized monitoring + native support for logging to a central server via encrypted and authenticated connections * Tamper resistance + database and configuration files can be signed + logfile entries and e-mail reports are signed + support for stealth operation |
| PackageMaintainer | Javier Fernández-Sanguino Peña <jfs@debian.org> |
| PackageName | samhain |
| PackageSection | admin |
| PackageVersion | 4.1.4-2+b1 |
| SHA-1 | 250E74244A20BE8BB5D5CCEEB4226BDFED091181 |
| SHA-256 | DBFB671750E30EC87FF1145FB8EDAA6B7213EDB1945BC58D61008F69484EAEF0 |
| Key | Value |
|---|---|
| FileSize | 1178282 |
| MD5 | 654F06B546A566D2FC462359AECA38D4 |
| PackageDescription | Data integrity and host intrusion alert system Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected on memory using steganography. . Main features * Complete integrity check + uses cryptographic checksums of files to detect modifications, + can find rogue SUID executables anywhere on disk, and * Centralized monitoring + native support for logging to a central server via encrypted and authenticated connections * Tamper resistance + database and configuration files can be signed + logfile entries and e-mail reports are signed + support for stealth operation |
| PackageMaintainer | Javier Fernández-Sanguino Peña <jfs@debian.org> |
| PackageName | samhain |
| PackageSection | admin |
| PackageVersion | 4.1.4-2+b1 |
| SHA-1 | 28A077B2182C2D424A05448FB1F2AFABD9966212 |
| SHA-256 | 94F819989010C8558675A806BBFBF11FEF5A96D90950FA9F2EBE2D783E94707B |
| Key | Value |
|---|---|
| FileSize | 1184910 |
| MD5 | 8FA30257B8ADC584DD9F9BB4F53B5084 |
| PackageDescription | Data integrity and host intrusion alert system Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected on memory using steganography. . Main features * Complete integrity check + uses cryptographic checksums of files to detect modifications, + can find rogue SUID executables anywhere on disk, and * Centralized monitoring + native support for logging to a central server via encrypted and authenticated connections * Tamper resistance + database and configuration files can be signed + logfile entries and e-mail reports are signed + support for stealth operation |
| PackageMaintainer | Javier Fernández-Sanguino Peña <jfs@debian.org> |
| PackageName | samhain |
| PackageSection | admin |
| PackageVersion | 4.1.4-2 |
| SHA-1 | 39DF99BA613B49056A93D6C513B9C2D4F668831B |
| SHA-256 | 759644C1D36B5EF1245D20ABB8572856770F553DDCA2E5B5FF8669F1ED516173 |
| Key | Value |
|---|---|
| FileSize | 1190790 |
| MD5 | E553391FED86AB85BEC800E3BE51C1C6 |
| PackageDescription | Data integrity and host intrusion alert system Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected on memory using steganography. . Main features * Complete integrity check + uses cryptographic checksums of files to detect modifications, + can find rogue SUID executables anywhere on disk, and * Centralized monitoring + native support for logging to a central server via encrypted and authenticated connections * Tamper resistance + database and configuration files can be signed + logfile entries and e-mail reports are signed + support for stealth operation |
| PackageMaintainer | Javier Fernández-Sanguino Peña <jfs@debian.org> |
| PackageName | samhain |
| PackageSection | admin |
| PackageVersion | 4.1.4-2+b1 |
| SHA-1 | 3DDA27408D22A76001DB7CCF6D1516EA3F66F30E |
| SHA-256 | 56DB0272045664585622D1BD5E732EFBA6A8189167571DA7BBE50F346B46A13C |