Configuring the File Integrity Monitor task

To configure general settings of the File Integrity Monitor task using the Application Console:

1. In the Application Console tree, expand the System Inspection node.
2. Select the File Integrity Monitor child node.
3. Click the Properties link in the results pane of the File Integrity Monitor node.

   The Task settings window appears.

4. On the General tab, configure the following settings:
   1. Clear or select the Log information about file operations that appear during the monitor interruption period check box.

      The check box enables or disables monitoring of the file operations specified in the File Integrity Monitor task settings when the task is not running for any reason (removal of a hard disk, task stopped by user, software error).

      If the check box is selected, Kaspersky Embedded Systems Security for Windows will record events in all monitoring scopes when the File Integrity Monitor task is not running.

      If the check box is cleared, the application will not log file operations in monitoring scopes when the task is not running.

      The check box is selected by default.

   2. Clear or select the Block attempts to compromise the USN log check box.

      The check box enables or disables protection of the USN log.

      If the check box is selected, Kaspersky Embedded Systems Security for Windows will block attempts to delete the USN log or to compromise the USN log's content.

      If the check box is cleared, the application will not monitor changes to the USN log.

      The check box is selected by default.

5. On the Schedule and Advanced tabs, configure the task start schedule.
6. Click the OK button to save the changes.

Kaspersky Embedded Systems Security for Windows applies the new settings to the running task. Information about the date and time of settings modification are saved in the system audit log.