File Integrity Monitoring
Press enter or click to view image in full size
File integrity monitoring (FIM), sometimes referred to as file integrity management, is a security process that monitors and analyzes the integrity of critical assets, including file systems, directories, databases, network devices, the operating system (OS), OS components and software applications for signs of tampering or corruption, which may be an indication of a cyberattack.
In this article we have been going to configure the Integrity Monitoring of files using Wazuh Server and agent.
LAB Environment:
- Windows 10 — Wazuh Agent Deployed
2. Wazuh Server on Virtual Machine
3. Ubuntu VM for accessing Wazuh Kibana Dashboard.
Now First of we will check the availability of Wazuh-agent using wazuh server dashboard as shown below.
Press enter or click to view image in full size
As we can see that Window agent is active on and we can use it for SIEM purposes.
Step 1: File Integrity Monitoring Tab\Section Opening
i. Click on Security Information Management