IDS is a file integrity monitoring system that tracks changes in specified directories and logs any detected modifications. It uses inotify for file system event monitoring and a simple diff algorithm to detect changes in file contents.

• Monitors specified directories for file changes
• Logs detected changes to a specified log file
• Supports recursive directory watching
• Configurable through a JSON configuration file

• C++17
• CMake 3.10 or higher
• Threads library
• JSONCPP library

1. Clone the repository:

   git clone https://github.com/phantom-kali/IDS.git
   cd IDS

2. Create a build directory and navigate to it:

   mkdir build
   cd build

3. Run CMake to configure the project:

   cmake ..

4. Build the project:

   make

5. Install the executable and configuration file:

   sudo make install

The configuration file config.json should be placed in /etc/file_ids. It contains the following settings:

• watched_directories: List of directories to monitor.
• log_path: Path to the log file.
• recursive_watch: Boolean to enable or disable recursive directory watching.

Example config.json:

{
    "watched_directories": [
        "/home/user/sensitive",
        "/etc"
    ],
    "log_path": "/var/log/file_ids.log",
    "recursive_watch": true
}

Run the file_ids executable to start monitoring the specified directories:

The application logs detected changes to the specified log file. Log messages include information about the type of change (added, removed, modified) and the affected file.