LogRhythm’s holistic approach allows security personnel to be notified when files are created or key files are viewed, deleted or modified, and when group ownership of files is changed.LogRhythm provides granular controls and filters that can pinpoint specific files and perform scans at desired intervals or it can be configured to monitor critical files in real time. File level behavior can then be correlated to additional security and audit activities to build a comprehensive window into potentially harmful network activity.

Fully integrated with Log & Event Management & Endpoint Monitoring & Control:

Addresses 35 specific mandates of PCI DSS 1.2.

• Sends contextualized alerts whenever confidential data is viewed, modified or deleted.
• Provides a complete set of forensic data for rapidly identifying the root cause of security breaches.
• Centralized, policy-based configuration and administration.

Monitors All Types of Files in Near-real Time:

• Including executables, configuration files, content files, log and audit files, web files, database files, and more.
• Fine-grain controls ensure that each monitored file is scanned at the desired frequency.
• User activity monitoring adds relevant context to file modifications and views by identifying what users are logged into the system at the time of the activity.

Out-of-the-box policies are provided for common applications. LogRhythm File Integrity Monitoring is supported on Windows, Unix and Linux systems.