• tripwiredb should be on RO media
• db stored in /var/lib/tripwire/HOSTNAME.twd
• to run after initializing, and can check for changes: tripwire --check
• Where do reports go? find the answer in /etc/tripwire/twcfg.txt
• to examine reports:
  twprint --print-report -r NAMEOFREPORT

NEXT
PREVIOUS
Master Index