How to Check AIDE Reports

Step 1: View Latest AIDE Report

sudo aide --check --report=file:/var/log/aide-report.txt
sudo cat /var/log/aide-report.txt

Step 2: Filter Added/Removed Files

sudo aide --check | grep -E "Added|Removed"

Step 3: Update Database After Legitimate Changes

sudo aide --update
sudo cp /var/lib/aide/aide.db.new /var/lib/aide/aide.db