Pre-deployment security (Tripwire, etc.)

[Ben Scott]

Hi all,

  A good thing to do would be to use Tripwire or similar to build a
"known good" database of file signatures prior to deployment.  When it
comes to intrusion detection and compromise recovery, this is the only
way to be sure.

  I did some work with Tripwire and alternatives a few years ago,
although I haven't touched it recently.  Anyone want to toss out
alternatives/suggestions/best practices/etc?

-- Ben