AIDE is a tool for monitoring file system changes. It can be used to detect unauthorized monitored files and directories. AIDE was written to be a simple and free alternative to Tripwire.
Much more lightweight than the more commonly used solutions for this problem these days.
Packaged by just about every distro these days.
stali is a static linux distribution based on the original pre-2010 plans of the suckless.org project. x86-64 and Arm architectures are targeted. One Makefile builds it all. Tries to avoid sucking at all costs. Ideal for embedded systems.
This library implements a simple "filesystem" inside an IMAP folder. The filesystem can be symmetrically encrypted (using the cryptography library's AES-128 Fernet construct), it supports concurrent readers/writers and file versioning. The motivation for this tool is that an IMAP account is the most commonly available form of standards compliant "cloud storage" available to the general public. This makes an IMAP account a compelling location for app backups or basic synchronization, and Mailfile's sister project, Mailpile, needs exactly such features.
FUSE compatible using fusepy.
Python v2.7, unfortunately.
A short tutorial on recovering a damanged EXT2 or EXT3 file system in a Linux machine by referencing one of the backup superblocks.
dumpe2fs /dev/sda2 | grep superblock- Check and repair a Linux file system using one of the alternate superblocks:
fsck -b 32768 /dev/sda2 - Try to mount file system.
An archive of free-to-download and use disk images for practicing your data forensics fu or testing file carving tools.
How to configure AIDE so it works when somebody turned SElinux off on the machine and you can't turn it back on.
documentation for OSTree, a library and tools for committing, downloading, and stacking downloaded filesystem images in a Git-like fashion. Implements a content addressable datastore. Used for building live distro images, possibly VMs or immutable server images. Atomic upgrades, rollbacks, multiple bootable roots, binary history,