Mailing the story:
How to deploy OSSEC across a large network of systems from RPMs
It can do “log analysis, file integrity checking, Windows registry monitoring, centralized policy enforcement, rootkit detection, real-time alerting and active response.”