The Samhain filesystem integrity monitoring tool http://samhain.netpedia.net/ is a vast improvement over tripwire and the like. It offers a steganographic option to hide your datafiles and log files, making its presence hard to detect and meaningfully modify. It can also report to a central log server to avoid leaving obvious traces through syslog, or cleartext email.