Draft:Advanced Prohibited Files: Difference between revisions
MigrationBot (talk | contribs) Import from cypat.guide: docs/linux/prohibited_files/advanced_prohibited_files.md |
MigrationBot (talk | contribs) Remove Pending review category: not yet requested via Request review Tag: Manual revert |
| (One intermediate revision by the same user not shown) | |
(No difference)
| |
Latest revision as of 03:29, 2 October 2026
This draft is ready for review. If you're the author, click below to notify a reviewer. A reviewer will check it for structure, sourcing, and accuracy. You may continue editing while you wait.Request reviewApprove draftReject draft
Author(s): Matthias Lee (ml2322)
Last Updated: 07-07-2025
| Recommended Prerequisites (click to expand) |
|---|
|
|
AIDE
The most comprehensive solution to find prohibited files is to use AIDE (Advanced Intrusion Detection Environment). AIDE works by storing a database of all files on the system, and their attributes, and it then compares your system to the backup DB, which you make on a clean VM. AIDE is the most complicated method, as it requires specific configurations, and often also requires custom filters to make the output more usable.