I want to make a log to detect the nature of intrusions into my Unix/Linux based server.
For that I want to learn some tools like Open Source Tripwire and OSSEC. Please suggest to me similar tools.
What kind of info can I get about the intruder from the tools of this kind? Can I automate the process of keeping track of the alerts generated by these tools in a file?