OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

monitor and protect SSH sessions with eBPF

File Integrity Monitor written in C — detects unauthorized file modifications using hash comparison and baseline snapshots.