check_siem is a security incidents and events monitor written in Perl. It reports on unusual user, process, net, and file activities by leveraging fuzzy LSOF statistics. Think of it as a fun-sized HIDS.
2278b6041fcb1fa3753aa036c6538d183166b0b6b8a797bce3a6df8e4d889958