File Integrity Monitoring Software
All Products
(1-16 of 16)
Microsoft Defender for Cloud is a Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platform (CWPP) for Azure, on-premises, and multicloud (Amazon AWS and Google GCP) resources.
CrowdStrike offers the Falcon Endpoint Protection suite, an antivirus and endpoint protection system emphasizing threat detection, machine learning malware detection, and signature free updating. Additionally the available Falcon Spotlight module delivers vulnerability assessment…
ADAudit Plus offers real-time monitoring, user and entity behaviour analytics, and change audit reports that helps users keep AD and IT infrastructure secure and compliant.
- Track all changes to Windows AD objects including users, groups, computers, GPOs, and OUs.
- Achieve hybrid AD monitoring with a single, correlated view of all the activities happening across both on-premises AD and A…
AlienVault® Unified Security Management® (USM) delivers threat detection, incident response, and compliance management in one unified platform. It is designed to combine all the essential security capabilities needed for effective security monitoring across cloud and on-premises environments, including SIEM, intrusion detection, vulnerability management, as well as continuo…
Datadog is a monitoring service for IT, Dev and Ops teams who write and run applications at scale, and want to turn the massive amounts of data produced by their apps, tools and services into actionable insight.
SolarWinds LEM is security information and event management (SIEM) software.
In addition to their incident response service, Rapid7 offers InsightIDR, a combined XDR and SIEM that provides user behavior and threat analytics.
Netwrix Change Tracker is a security configuration management software that helps to secure critical IT systems and prove compliance. The tool highlights unauthorized changes that may indicate suspicious activities, enhancing risk management capabilities, and also to support security…
ALM-FIM is a File Integrity Monitoring solution which is part of the same family of products as Assuria's ALM-SIEM forensic SIEM/Log Management solution. ALM-FIM collects and stores meta data about files, folders and registry keys (a.k.a. Nodes) in order to provide the monitoring…
Tripwire File Integrity Monitoring (FIM) has the built-in capability to reduce noise by providing multiple ways of determining low-risk change from high-risk change as part of assessing, prioritizing and reconciling detected change. Auto-promoting countless business-as-usual changes…
Varonis offers their Data Security Platform, a modular suite of data acess and data security products providing sensitive data discovery, data access governance, unusual behavior detection, GDPR compliance support, as well as incident playbooks and cybersecurity forensic reporting.…
Qualys TruRisk Platform (formerly Qualys Cloud Platform, or Qualysguard), from San Francisco-based Qualys, is network security and vulnerability management software featuring app scanning and security, network device mapping and detection, vulnerability prioritization schedule and…
Proofpoint Intelligent Classification and Protection (formerly Dathena, acquired by Proofpoint in January 2022) is an AI-powered approach to identifying and classifying business-critical data. It provides actionable recommendations and helps accelerate enterprise DLP programs.
Panzura’s Smart App layer provides data management capabilities, enabling consolidation, simplification, and advanced ransomware protection eliminating the need for insecure 3rd party applications and services.
Fidelis Halo is a cloud security platform developed by CloudPassage and acquired by Fidelis Security in May, 2021. The solution continually inventories, assesses and monitors IaaS and PaaS assets and services, and provides multi-function security for cloud-hosted servers, bare metal…
OSSEC is a server intrusion detection for every platform. OSSEC is fully open source and free, and can be tailored to meet a business's security needs through its configuration options, adding custom alert rules and writing scripts to take action when alerts occur. The OSSEC+ edition,…
Learn More About File Integrity Monitoring Software
What is File Integrity Monitoring Software?
File Integrity Monitoring (FIM) Software detects changes to critical system files including directories and registries, executable files and packages, configuration files, and sensitive data files such as password files. These events could be indicative of hostile intrusions or unauthorized access which might result in illicit modifications of critical information. Updates to vital resources are compared to their trusted baselines. These changes are logged, and alerts are created for suspicious activity, enabling follow-up auditing, analysis, and remediation.
FIM software supports continuous or scheduled monitoring, reviewing credentials, update access and permissions, file contents, hash, and configuration values. it identifies which user initiated the changes. FIM software is also used to review installations to see if systems are running their most current software versions and whether relevant patches have been applied. FIM software monitors Windows, Linux, Unix, and macOS systems. FIM software is especially valuable for highly regulated industries such as finance and health care, and for companies with sensitive or proprietary data.
File Integrity Monitoring Software Features
File Integrity Monitoring Software includes many of the following features.
- Detect file creation, modification, or deletion
- Monitors files, folders, registry keys, packages, databases, and directories
- Real-time monitoring
- Continuous, scheduled, snapshot, or random monitoring times
- Asset identification
- Security policy templates for monitored resources
- Custom security policies
- Rule-based monitoring
- Reputation databases
- Baseline setting
- Baseline and/or checksum integrity checking
- Monitoring intelligence for suspicious activity
- Alerting, recording, and reporting
- Capture file path, hostname, cluster, user, time of the event, before and after images
- Response and resolution tracking
- Search: file, host, cluster, event type, priority, user, time range
- Dashboards
- Support Windows, Linux, Unix, macOS
- Scalable
- Local, remote, and cloud-based monitoring
- On-premise, cloud-based, hybrid installations
File Integrity Monitoring Software Comparison
Consider the following when purchasing File Integrity Monitoring Software.
Security Suite vs. Standalone Products: FIM capabilities are often included in broader security suites such as Security Information and Event Management (SIEM), Intrusion Detection Systems, Log Management Tools, and Privileged Access Management Solutions. Stand-alone FIM software usually provides ready integrations with those solutions.
On-premises vs Cloud-based Installations: When appropriate for your environment cloud-based FIM solutions offer global reach, simplify implementation, and reduce the need for multiple point product installations and their potentially higher costs.
Platforms: Some FIM products can be installed on and support multiple operating systems, others will only support Windows or Linux/Unix.
Scalability: Depending on the size of your IT infrastructure, FIM can create a large amount of information to be reviewed. For enterprise-scale monitoring, your selection should provide the ability to narrow its focus to essential resources and critical updates.
Pricing Information
Most vendors recommend obtaining an FIM custom price quote based on your IT infrastructure and requirements. When FIM features are included as part of a larger security solution the cost is often bundled in with its other components. Free trials are available and there are free open-source options