Comment by everdayimhustln

Samhain is less well-known but superior to TW, AIDE and OSSEC. (I've deployed both FOSS and commercial TW.)

http://www.la-samhna.de/library/scanners.html

http://www.la-samhna.de/samhain/s_faq.html