Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks.
It supports central monitoring as well as powerful (and new) stealth features to run undetected in memory, using steganography.
This security software article is a stub.
You can help Wikipedia by expanding it.