Host-based intrusion detection system comparison Comparison of host-based intrusion detection system components and systems. Free and open-source software As per the Unix philosophy a good HIDS is composed of multiple packages each focusing on a specific aspect. Package Last Update Ubuntu Official Repositories CentOS Official Repositories openSUSE Official Repositories File Network Logs Config Notes OSSEC 2025 No[1] No[2] Yes[3] Yes Yes Yes Yes Wazuh 2025[4] No No ? Yes Yes Yes Yes Samhain 2023 Yes[5] No Yes[6] Yes No Partial[7] Snort 2025[8] Yes[9] No[10] No No Yes No chkrootkit 2023 Yes[11] No Yes Yes No Partial[12] rkhunter 2018 Yes[13] Yes[14] Yes Yes No No Yes unhide[15] 2012 Yes[16] Yes[17] Yes No No No proc ps compare Sguil 2017 No No No No Yes No Logwatch[18] 2017 Yes[19] Yes[20] Yes No No Yes Logcheck[21] 2017 Yes[22] Yes[23] Yes No No Yes Epylog[24] 2014 Yes[25] Yes[26] Yes No No Yes SWATCH[27] 2015 Yes[28] Yes[29] Yes No No Yes sagan 2021 Yes[30] No No No No Yes aide 2025 Yes[31] Yes[32] Yes Yes No No yes uses libs for routines tripwire 2018 Yes[33] Yes[34] Yes Yes No No Tiger 2018 Yes[35] No No Yes No No Yes 3/42 modules are Debian specific. Proprietary software Package Year[36] Linux Windows File Network Logs Config Notes Lacework 2018 Yes No Yes Yes Yes Yes Verisys 2018 Yes Yes Yes Yes Yes Nessus 2017 Yes Yes Yes Atomicorp 2019 Yes Yes Yes Yes Yes Yes Commercially enhanced version of OSSEC Spartan 2021 No Yes Yes Yes Yes Yes Websocket API, IP to Country mapping, DynDNS Integration References ^ "Downloads OSSEC". OSSEC. Retrieved 2017-10-19. OSSEC for Debian Based systems ^ "Downloads OSSEC". OSSEC. Retrieved 2017-10-29. OSSEC for RHEL/Fedora Based systems ^ "ossec-hids". openSUSE OBS. Retrieved 2024-08-11. An Open Source Host-based Intrusion Detection System ^ "Wazuh documentation Release notes". Retrieved 2025-07-16. ^ "Samhain". Ubuntu. Retrieved 2017-04-19. Samhain in the Ubuntu Repositories ^ "Samhain". openSUSE OBS. Retrieved 2024-08-11. File integrity and host-based IDS ^ Last ^ "snort3/snort3 Releases". Retrieved 2025-07-16. ^ "Snort". Ubuntu. Retrieved 2017-04-19. Snort in the Ubuntu Repositories ^ "Snort". Cisco Systems. Retrieved 2017-05-31. Snort in the CentOS Repositories ^ "ChkRootkit". Ubuntu. Retrieved 2017-04-19. ChkRootkit in the Ubuntu Repositories ^ lastlog, wtmp, utmp, wtmpx ^ "RKHunter". Ubuntu. Retrieved 2017-04-19. RKHunter in the Ubuntu Repositories ^ "RKHunter". Ubuntu. Retrieved 2017-04-19. RKHunter in the CentOS Repositories ^ "unhide". debian. Retrieved 2017-04-17.unhide is notable because it's part of Debian and Fedora ^ "UnHide". Ubuntu. Retrieved 2017-04-19. UnHide in the Ubuntu Repositories ^ "UnHide". Ubuntu. Retrieved 2017-04-19. UnHide in the CentOS Repositories ^ "Logwatch". debian. Retrieved 2017-04-17. Logwatch is notable because it's part of Debian and Fedora ^ "LogWatch". Ubuntu. Retrieved 2017-04-19. LogWatch in the Ubuntu Repositories ^ "LogWatch". Ubuntu. Retrieved 2017-04-19. LogWatch in the CentOS Repositories ^ "Logcheck". debian. Retrieved 2017-04-17. Logcheck is notable because it's part of Debian and Fedora ^ "Logcheck". Ubuntu. Retrieved 2017-04-19. Logcheck in the Ubuntu Repositories ^ "Logcheck". Ubuntu. Retrieved 2017-04-19. Logcheck in the CentOS Repositories ^ "Epylog". debian. Retrieved 2017-04-17. Epylog is notable because it's part of Debian and Fedora ^ "Epylog". Ubuntu. Retrieved 2017-04-19. Epylog in the Ubuntu Repositories ^ "Epylog". Ubuntu. Retrieved 2017-04-19. Epylog in the CentOS Repositories ^ "SWATCH". debian. Retrieved 2017-04-17. SWATCH is notable because it's part of Debian and Fedora ^ "SWATCH". Ubuntu. Retrieved 2017-04-19. SWATCH in the Ubuntu Repositories ^ "SWATCH". Ubuntu. Retrieved 2017-04-19. SWATCH in the CentOS Repositories ^ "Sagan". Ubuntu. Retrieved 2017-04-19. Sagan in the Ubuntu Repositories ^ "AIDE". Ubuntu. Retrieved 2017-04-19. AIDE in the Ubuntu Repositories ^ "AIDE". Ubuntu. Retrieved 2017-04-19. AIDE in the CentOS Repositories ^ "Tripwire". Ubuntu. Retrieved 2017-04-19. Tripwire in the Ubuntu Repositories ^ "Tripwire". Ubuntu. Retrieved 2017-04-19. Tripwire in the CentOS Repositories ^ "Tripwire". Ubuntu. Retrieved 2017-04-19. Tripwire in the Ubuntu Repositories ^ Last updated External links Debian security manual Arch security wiki CentOS security wiki Ubuntu security wiki

Index: pl ar de en es fr it arz nl ja pt ceb sv uk vi war zh ru af ast az bg zh-min-nan bn be ca cs cy da et el eo eu fa gl ko hi hr id he ka la lv lt hu mk ms min no nn ce uz kk ro simple sk sl sr sh fi ta tt th tg azb tr ur zh-yue hy my ace als am an hyw ban bjn map-bms ba be-tarask bcl bpy bar bs br cv nv eml hif fo fy ga gd gu hak ha hsb io ig ilo ia ie os is jv kn ht ku ckb ky mrj lb lij li lmo mai mg ml zh-classical mr xmf mzn cdo mn nap new ne frr oc mhr or as pa pnb ps pms nds crh qu sa sah sco sq scn si sd szl su sw tl shn te bug vec vo wa wuu yi yo diq bat-smg zu lad kbd ang smn ab roa-rup frp arc gn av ay bh bi bo bxr cbk-zam co za dag ary se pdc dv dsb myv ext fur gv gag inh ki glk gan guw xal haw rw kbp pam csb kw km kv koi kg gom ks gcr lo lbe ltg lez nia ln jbo lg mt mi tw mwl mdf mnw nqo fj nah na nds-nl nrm nov om pi pag pap pfl pcd krc kaa ksh rm rue sm sat sc trv stq nso sn cu so srn kab roa-tara tet tpi to chr tum tk tyv udm ug vep fiu-vro vls wo xh zea ty ak bm ch ny ee ff got iu ik kl mad cr pih ami pwn pnt dz rmy rn sg st tn ss ti din chy ts kcg ve

Prefix: a b c d e f g h i j k l m n o p q r s t u v w x y z 0 1 2 3 4 5 6 7 8 9

Portal di Ensiklopedia Dunia

Agama

Bahasa

Biografi

Budaya

Ekonomi

Elektronika

Film

Filsafat

Geografi

Indonesia

Ilmu

Lingkungan

Masyarakat

Matematika

Militer

Mitologi

Musik

Olahraga

Pendidikan

Politik

Sastra

Sejarah

Seni

Teknologi