Draft:Advanced Prohibited Files: Difference between revisions
MigrationBot (talk | contribs) Import from cypat.guide: docs/linux/prohibited_files/advanced_prohibited_files.md |
MigrationBot (talk | contribs) Backfill (v3.0 review queue): added to the review queue |
||
| Line 22: | Line 22: | ||
[[Category:Linux Prohibited Files|033]] | [[Category:Linux Prohibited Files|033]] | ||
[[Category:Migrated from cypat.guide]] | [[Category:Migrated from cypat.guide]] | ||
[[Category:Pending review]] | |||
Latest revision as of 05:42, 22 September 2026
This draft is ready for review. If you're the author, click below to notify a reviewer. A reviewer will check it for structure, sourcing, and accuracy. You may continue editing while you wait.Request reviewApprove draftReject draft
Author(s): Matthias Lee (ml2322)
Last Updated: 07-07-2025
| Recommended Prerequisites (click to expand) |
|---|
|
|
AIDE
The most comprehensive solution to find prohibited files is to use AIDE (Advanced Intrusion Detection Environment). AIDE works by storing a database of all files on the system, and their attributes, and it then compares your system to the backup DB, which you make on a clean VM. AIDE is the most complicated method, as it requires specific configurations, and often also requires custom filters to make the output more usable.