An open source host-based intrusion detection system that performs log analysis, file integrity checking, rootkit detection, and real-time alerting across multiple operating systems.

A free enhanced version of OSSEC that adds machine learning, thousands of additional rules, and integration with ELK stack and real-time threat intelligence.