This article has multiple issues. Please help improve it or discuss these issues on the talk page. (Learn how and when to remove these template messages) This article needs additional citations for verification. Please help improve this article by adding citations to reliable sources. Unsourced material may be challenged and removed.Find sources: "Samhain" software – news · newspapers · books · scholar · JSTOR (October 2014) (Learn how and when to remove this message) The topic of this article may not meet Wikipedia's notability guidelines for products and services. Please help to demonstrate the notability of the topic by citing reliable secondary sources that are independent of the topic and provide significant coverage of it beyond a mere trivial mention. If notability cannot be shown, the article is likely to be merged, redirected, or deleted.Find sources: "Samhain" software – news · newspapers · books · scholar · JSTOR (October 2014) (Learn how and when to remove this message) (Learn how and when to remove this message)

Samhain
Developer(s)	Samhain Services

Stable release	4.4.10 / May 14, 2023; 13 months ago (2023-05-14)^[1]

Written in	C^[2]
Operating system	Linux, all POSIX/UNIX Systems, Microsoft Windows
Type	Security, Monitoring, HIDS
License	GNU General Public License
Website	la-samhna.de/samhain

Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected in memory, using steganography.

Main features

Complete integrity check
- uses cryptographic checksums of files to detect modifications,
- can find rogue SUID executables anywhere on a disk, and
Centralized monitoring
- native support for logging to a central server via encrypted and authenticated connections
Tamper resistance
- database and configuration files can be signed
- log file entries and e-mail reports are signed
- support for stealth operation

See also