# Patriot Linux | Host IDS For Desktop Users

**URL:** <https://onehack.st/t/patriot-linux-host-ids-for-desktop-users/172942>\
**Category:** Tools & Scripts\
**Tags:** tools, technology\
**Created:** [February 17, 2021, 12:11pm UTC](https://onehack.st/t/patriot-linux-host-ids-for-desktop-users/172942 "2021-02-17T12:11:55Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![BlueHacker](https://onehack.st/user_avatar/onehack.st/bluehacker/32/174721_2.png) [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Post date:** [February 17, 2021, 12:11pm UTC](https://onehack.st/t/patriot-linux-host-ids-for-desktop-users/172942/1 "2021-02-17T12:11:55Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/7/4/74346081d09d2b0f662d1fdc49f0323277a6fce6.png)

Patriot Linux is a HIDS for desktop users who wants real time graphical alerts when something suspicious happens

Patriot detect:

1- Suspicious process running

2- New process starting TCP/IP Connection

 ![image](https://onehack.st/uploads/default/original/3X/f/d/fd4bf9bf805919ede057fe05869664e1ae395285.png)

3- Auditd alerts

 ![image](https://onehack.st/uploads/default/original/3X/d/4/d4a8ea8901ed3867381274a6dc052ca42bacbf53.png)

4- New keyboards plugged

**Installation**

You need to configure Auditd with this suggested rules [https://github.com/Neo23x0/auditd](https://github.com/Neo23x0/auditd) (you can use your own rules and simply modify keywords in the code)

Install xinput (apt install xinput or yum install xorg-x11-server-utils)

And then simply download py files and run python3 patriot.py

Tested in CentOS/Fedora and Debian/Ubuntu

## GitHub:

> **[GitHub - YJesus/Patriot-Linux: Host IDS for desktop users](https://github.com/YJesus/Patriot-Linux)**
>
> Host IDS for desktop users