Currently the only HIDS that appear to correctly work and be “nicely” designed for Mac OS/X are radmind and samhain. Therefore I am using one of these as my HIDS solution for now. Or at least I will be.
I have installed samhain by hand as it is not yet part of DarwinPorts. This should make updating cleaner and easier I hope.
