This is a cost-free HIDS that focuses on rootkit detection and file signature comparisons for Unix and Unix-like working programs, so it will work on Mac OS and Linux too.Process checks are issued on demand and do not operate constantly, and that is a little bit of a shortfall using this type of HIDS. As this can be a command-line purpose, although