File Integrity Monitoring
Document Downloads:
Steady-state monitoring to ensure the integrity of sensitive files is more than just a security best practice. For many organizations it is a regulatory mandate as well. PCI-DSS 11.5 mandates:
"Deploy file integrity monitoring to alert personnel to unauthorized modifications of critical system or content files, and perform file comparisons at least daily or more frequently if the process can be automated."
LogRhythm provides comprehensive file integrity monitoring that is fully integrated with enterprise-class log & event management as well as endpoint monitoring & control. This integrated approach enables LogRhythm customers to simplify and strengthen their security, audit and compliance posture.
Fully Integrated with Log & Event Management & Endpoint Monitoring & Control:
- Provides additional PCI Compliance with the most complex elements of the DSS
- Central & policy-based configuration and administration
- User activity monitoring syncs user context to file changes/deletions/additions/permission changes, etc.(e.g., at time of change: who was logged in, for how long, what else did they do, etc.)
Monitors All Types of Files in Near-real Time:
- Including: executables, configuration files, content files, log and audit files, web files, database files, etc.
- Configurable frequency of scanning and reporting (e.g., scan every minute for password files, scan daily for general business files, etc.)
Fine-grain Controls and Filters:
- Ensures only applicable files/folders are monitored as often as required
Out-of-the-box Policies Provided for O/S and Common Applications:
- Supported on Windows, Unix and Linux systems
