iWatch is a software program that monitors filesystems in real-time. Its purpose is to provide a dynamic, proactive approach to monitoring for changes, additions or deletions that may take place.
Integrity checking tools for filesystems are an essential part of any system's security. However, it's important to note that administrators won't know about unauthorized changes or intrusions until the next scheduled scan. This can take hours or even a day, which is why it's critical to know about any intrusion as soon as possible. Fortunately, there are various filesystem integrity checkers like tripwire, AIDE, and samhain on the market today, but they don't alert administrators immediately after an intrusion. This is where iWatch comes in.
iWatch is a Perl-based tool that monitors filesystem integrity in real-time, sending an alert immediately to the system administrator when it detects changes in the monitored filesystem. It's based on inotify, a file change notification system introduced in Linux kernel version 2.6.13. iWatch is incredibly easy to use - if you want to monitor changes in, say, the /etc filesystem, then all you need to do is run iwatch in the console, and it will alert you if something changes. You can even receive email notifications with the command "iwatch -m [email protected] /etc."
iWatch also offers a configuration file that makes it easy to monitor multiple directories at the same time, using an XML file with an easily understandable structure. This tool is becoming increasingly popular, and there are a number of new features in the latest release. These include an -X option that allows specifying exceptions using regular expressions, new string formats for command options (%c, %e and %F), and changes to how emails are sent. Notifications are now sent for all defined events, providing comprehensive protection.
In conclusion, iWatch is a powerful and easy-to-use tool with significant potential in the software market. It offers real-time filesystem integrity monitoring and immediate alerts to administrators when changes are detected, rather than just relying on scheduled scans. This is vital for any organization that wants to avoid significant damage, and it's why iWatch is becoming a go-to tool for system administrators worldwide.
iWatch is a Perl-based tool that monitors filesystem integrity in real-time, sending an alert immediately to the system administrator when it detects changes in the monitored filesystem. It's based on inotify, a file change notification system introduced in Linux kernel version 2.6.13. iWatch is incredibly easy to use - if you want to monitor changes in, say, the /etc filesystem, then all you need to do is run iwatch in the console, and it will alert you if something changes. You can even receive email notifications with the command "iwatch -m [email protected] /etc."
iWatch also offers a configuration file that makes it easy to monitor multiple directories at the same time, using an XML file with an easily understandable structure. This tool is becoming increasingly popular, and there are a number of new features in the latest release. These include an -X option that allows specifying exceptions using regular expressions, new string formats for command options (%c, %e and %F), and changes to how emails are sent. Notifications are now sent for all defined events, providing comprehensive protection.
In conclusion, iWatch is a powerful and easy-to-use tool with significant potential in the software market. It offers real-time filesystem integrity monitoring and immediate alerts to administrators when changes are detected, rather than just relying on scheduled scans. This is vital for any organization that wants to avoid significant damage, and it's why iWatch is becoming a go-to tool for system administrators worldwide.
What's New
Version 0.2.1: N/A