Someone has broken into my fedora 13 machine.  Aside from closing unused ports on the firewall and router and disabling unused services, what should I be doing to harden my set up?  Tripwire?  AIDE?  What else?  Thanks in advance!