Pulsar is Hubble's modular File Integrity Monitoring system. This set of modules allows you near real-time event notification on changes to critical system binaries. Pulsar supports direct checksum validation, checksum search and is fully compatible with system prelinking.
- inotify
- checksum validation
- auditd
documentation pending (see pulsar/inotify directory structure for hints)