Tripwire File Integrity Monitoring

Tripwire File Integrity Monitoring (FIM) has the built-in capability to reduce noise by providing multiple ways of determining low-risk change from high-risk change as part of assessing, prioritizing and reconciling detected change. Auto-promoting countless business-as-usual changes reduce the noise so IT has more time to investigate changes that may truly impact security and introduce risk. Tripwire uses agents to continuously capture detailed who, what, and when details in real time, to ensure that users detect all change, capture details about each one, and use those details to determine the security risk or non-compliance.

Tripwire provides the ability to integrate File Integrity Manager with existing security controls: security configuration management (SCM), log management and SIEM. Tripwire FIM adds components that tag and manage the data from these controls more intuitively and in ways that protect data better than before. For example, the Event Integration Framework (EIF) adds valuable change data from File Integrity Manager to Tripwire LogCenter or almost any other SIEM. With EIF and other foundational Tripwire security controls, the user can manage the security of IT infrastructure.

• Create Focus - Spotlight incidents that help IT and Security focus on what matters.
• Real-Time Intelligence - Quickly address trouble spots with actionable intelligence.
• Deeper Insights - Reduce the guesswork from what happened, when and by whom.
• Integrations - Save time by validating that the planned changes have actually occurred.