Before I started to migrate to QubesOS I have used the host based IDS
https://www.la-samhna.de/samhain/index.html on Debian and
other systems. But I did not tried it in QubesOS yet.
Best regards, Peter Funk
--
Peter Funk ✉:Oldenburger Str.86, 27777 Ganderkesee, Germany; 📱:+49-179-640-8878 ✉office: ArtCom GmbH, Haferwende 2, D-28357 Bremen, Germany
☎office:+49-421-20419-0 <http://www.artcom-gmbh.de/>