As i understand it users of linux still using Tripwire as a solid intrusion detection system, for servers and home desktop computers.
If you use google you can find howto's from 2014 and later.
As i understand it Tripwire does not have any security holes and if you install the Tripwire database on removable media, then a hacker/cracker can not modify your system with out you notice.

So i will post my howto - even if my Tripwire installation not prevent me from intrusion so does it at least letting me know if there has been one.

Cheers

As the OP said some people (think they still should) favour tripwire over AIDE of Samhain. (Or worse: don't even know they exist.) The only thing we can do is "advertise" those other products and point out why they are (way, way) better in terms of clarity of license, continued development and support, maintaining own process and database integrity, detection methods, using the client-server paradigm, etc, etc.