About File Integrity Monitoring
January 20, 2022
ID 161324
The File Integrity Monitoring task is designed to track actions performed with the files and directories in the monitoring scopes specified in the task settings. You can use the task to find file changes that may indicate a security breach on the protected server. You can also configure file changes to be tracked during periods when monitoring is interrupted.
To use File Integrity Monitoring functionality, you must purchase an extended license that covers this functionality. File Integrity Monitoring is disabled by default.
File integrity monitoring can be performed in real-time mode by running the On-access File Integrity Monitoring (OAFIM) task. Also, On-demand File Integrity Monitoring (ODFIM) tasks can be created and run.
Both OAFIM and ODFIM tasks send notifications about changes to an object access control list. For the OAFIM task, details about what exactly was changed are not reported. For the ODFIM task, information is reported about attribute changes and file / directory moves are reported.
