Overview

Tracking changes to system files can help ensure normal functioning of an operating system and its applications. While, tracking creation of new program files can help detect malware. For these reasons, file integrity monitoring (FIM) which involves monitoring changes across program and system files is important. ADAudit Plus helps monitor file integrity across your Windows network.

Supported systems:

Windows Server versions:

• 2008/2008 R2
• 2012/2012 R2
• 2016/2016 R2
• 2019
• 2022

Workstation versions:

• Windows 11
• Windows 10
• Windows 8
• Windows 7
• Windows 7 (EOLed by Microsoft)
• Windows Vista (EOLed by Microsoft)

File and folder activity monitored:

• Create
• Modify
• Delete
• Move
• Rename
• Permission changes
• Audit setting changes (SACL)
• Owner changes
• Copy and paste
• Failed attempt to write
• Failed attempt to delete

This guide takes you through the process of setting up ADAudit Plus for FIM.