/Pulsar

Hubble's FIM System

Primary LanguagePythonApache License 2.0Apache-2.0

Pulsar

Pulsar is Hubble's modular File Integrity Monitoring system. This set of modules allows you near real-time event notification on changes to critical system binaries. Pulsar supports direct checksum validation, checksum search and is fully compatible with system prelinking.

Installation

Supported Modules

  • inotify
  • checksum validation

Planned Modules

  • auditd

inotify

documentation pending (see pulsar/inotify directory structure for hints)