File Integrity Monitor FIM detects change by first establishing a highly detailed baseline version of each monitored file or configuration in a known and trusted state. Using real-time monitoring, it detects change to any aspect of the file or configuration and captures these in subsequent versions.
Versions provide critical before and-after views that show exactly who made the change, what changed, and more. True FIM also applies change intelligence to each change to determine if it impacts integrity (for example, rules that determine if the change takes a configuration out of policy or is one that is typically associated with an attack).
File Integrity Monitor Key Benefits
Hybrid environment auditing
At-a-glance display
Hosted dashboard
Object protection
Real-time alerts on the move
SIEM integration
Auditor-ready reporting
Provides a reliable host-based intrusion detection system that safeguards against exploits and breaches
Captures change data , including who, what, when and even how details
Continuous, real-time change detection across the enterprise infrastructure—virtual, physical and cloud—to detect and respond to malware
File Integrity Monitor Products
Tripwire Enterprise File Integrity Management and Security Controls
