The SAMHAIN file integrity / intrusion detection system

Documentation

The fact sheet: a quick and concise description of features.
Also available as PDF file.

Our promotional PDF presentation.

All documentation listed below is also included in the samhain distribution tarball (in the docs/ subdirectory).

User Manual

samhain comes with an extensive User Manual that you can view (HTML) or download (PDF). The distribution includes both the HTML and the PDF version.

A German user manual is available from the Selflinux project in HTML and PDF format.

FAQ (Frequently asked questions)

We have a FAQ that deals with problems and issues that crop up more or less frequently in the user forum.

HOWTOs

Samhain on Windows (by Kris Dom)

Signed configuration and baseline database files

Using samhain in client/server mode

Troubleshooting client/server mode

Writing samhain modules (to extend its functionality) (by the eircom.net Computer Incident Response Team)