OSSEC is good for monitoring logs, system files, etc. as well as alerting (and blocking traffic if you want) when anything suspicious happens

Takes a bit of work to set up but is worth it and includes lots of basic checks by default

https://www.ossec.net/