System Integrity Monitoring

Kaspersky Endpoint Security monitors the integrity of the operating system on the protected device in real time or on demand.

• System Integrity Monitoring tracks in real time changes in files and directories that you have added to the monitoring scope in the component settings. You can track changes in files that may indicate a security breach on a protected device.
• You can use the System Integrity Check tasks to check for changes in files and directories that you have added to the monitoring scope by comparing the current state of a monitored object with a previously recorded state.

Using System Integrity Monitoring requires a license that includes this feature.

This feature is not supported in the KESL container.

Upon detecting changes to files or directories in the monitoring scope, Kaspersky Endpoint Security generates events about changes in object access control lists. System Integrity Monitoring does not share data on exact changes that were made. The System Integrity Check task sends data on modified attributes, and moved files and directories.

In this Help section Real-time System Integrity Monitoring System Integrity Check

Page top