From 8f60b413c3209329f0d21ecf686d8d7c07095d9a Mon Sep 17 00:00:00 2001
From: Richard Jones <rjones@redhat.com>
Date: Fri, 23 Apr 2010 10:25:35 +0100
Subject: [PATCH] todo docs: Integrate with host intrusion detection systems.
 (cherry picked from commit 6e269c6e5123c1558589e0a59844dc0187fbd63a)

---
 TODO | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/TODO b/TODO
index 834c4c0..ccf9034 100644
--- a/TODO
+++ b/TODO
@@ -281,3 +281,15 @@ blocks they occupy.
 And vice versa.
 
 Is it even possible?
+
+Integration with host intrusion systems
+---------------------------------------
+
+Perfect way to monitor VMs from outside the VM.  Look for file
+hashes, log events, login/logout etc.
+
+http://www.ossec.net/
+http://la-samhna.de/samhain/
+http://sourceforge.net/projects/aide/
+http://osiris.shmoo.com/
+http://sourceforge.net/projects/tripwire/
-- 
1.8.3.1