What is File Integrity Monitoring Software? File Integrity Monitoring (FIM) Software detects changes to critical system files including directories and registries, executable files and packages, configuration files, and sensitive data files such as password files. These events could be indicative of hostile intrusions or unauthorized access which might result in illicit modifications of critical information. Updates to vital resources are compared to their trusted baselines. These changes are ...
We’ve collected videos, features, and capabilities below. Take me there.
File Integrity Monitoring (FIM) Software detects changes to critical system files including directories and registries, executable files and packages, configuration files, and sensitive data files such as password files. These events could be indicative of hostile intrusions or unauthorized access which might result in illicit modifications of critical information. Updates to vital resources are compared to their trusted baselines. These changes are logged, and alerts are created for suspicious activity, enabling follow-up auditing, analysis, and remediation.
FIM software supports continuous or scheduled monitoring, reviewing credentials, update access and permissions, file contents, hash, and configuration values. it identifies which user initiated the changes. FIM software is also used to review installations to see if systems are running their most current software versions and whether relevant patches have been applied. FIM software monitors Windows, Linux, Unix, and macOS systems. FIM software is especially valuable for highly regulated industries such as finance and health care, and for companies with sensitive or proprietary data.
File Integrity Monitoring Software includes many of the following features.
Consider the following when purchasing File Integrity Monitoring Software.
Security Suite vs. Standalone Products: FIM capabilities are often included in broader security suites such as Security Information and Event Management (SIEM), Intrusion Detection Systems, Log Management Tools, and Privileged Access Management Solutions. Stand-alone FIM software usually provides ready integrations with those solutions.
On-premises vs Cloud-based Installations: When appropriate for your environment cloud-based FIM solutions offer global reach, simplify implementation, and reduce the need for multiple point product installations and their potentially higher costs.
Platforms: Some FIM products can be installed on and support multiple operating systems, others will only support Windows or Linux/Unix.
Scalability: Depending on the size of your IT infrastructure, FIM can create a large amount of information to be reviewed. For enterprise-scale monitoring, your selection should provide the ability to narrow its focus to essential resources and critical updates.
Most vendors recommend obtaining an FIM custom price quote based on your IT infrastructure and requirements. When FIM features are included as part of a larger security solution the cost is often bundled in with its other components. Free trials are available and there are free open-source options