How to Set Up Intrusion Detection (AIDE)

Step 1: Install AIDE

sudo apt install aide -y

Step 2: Initialize Database

sudo aideinit

Step 3: Copy Database to Working Location

sudo cp /var/lib/aide/aide.db.new /var/lib/aide/aide.db

Step 4: Run First Comparison

sudo aide --check

Step 5: Schedule Daily Checks

sudo crontab -e

Add:

0 4 * * * /usr/bin/aide --check | mail -s "AIDE Intrusion Check" admin@example.com