Good article, but nowadays most "script kidies" have known of systems like tripwire, it is quite easy to change / remove a tripwire like system, or even change its database, i don't think tripwire would be the best solution, you have a lot a others and tripwire has a strict license and is damn slow....
Gonçalo Gomes
[ more ]