Tripwire is a straightforward tool with a single purpose:
detect any variance in file integrity.
This means that
Tripwire can absolutely, unequivocally, determine if a
protected file has been altered in a way that violates the
policy set by the administrator. Tripwire can also determine
if files have been added to or deleted from protected
system directories. Tripwire also has a powerful and
flexible policy language used to define exactly to what
Tripwire should pay attention, allowing for minimal
"noise" or "false positives" in the reports.