OSSEC is a simple to install host-based intrusion detection system. The difficulty is in tuning the installation so that the resulting alerts are pertinent to the environment. Agents can be installed on a variety of systems; Web servers, mail servers, ...