Viewing File Change Records
File integrity monitoring provides change statistics, change types, and file change records, helping you learn about file changes in real time and detect malicious changes in a timely manner.
Viewing File Change Overview
- Log in to the management console.
- In the upper left corner of the page, select a region, click , and choose Security & Compliance > HSS.
- In the navigation pane, choose
. Check the file change overview.
You can select an enterprise project for filtering.
Figure 1 File integrity monitoring page
Table 1 File change overview parameters Parameter
Description
Overview
Number of servers where files are changed.
Changes
- Total Changes: total number of file and registry changes.
- File Changes: number of all file changes.
- Registry Changes: number of registry changes.
Action
- Modify: total number of file and registry changes.
- Create: total number of file and registry creations.
- Delete: total number of file and registry deletions.
Viewing the File Change Records of a Single Server
- In the server list, you can view the number of files and registry changes on a servers and the time when they were last changed.
- Click a server name to go to the server change details page. You can view the file change details of the server.
Table 2 Server file change parameters Parameter
Description
Example Value
File Name
Name of a modified file.
du
Path
Path of a modified file.
-
Change Description
Description of the change.
To view the change details, hover the cursor over the change content.
SHA2560ba0c4b5e48e55a6 is changed to 4f6079f5b37d1513.
Type
Type of a modified file. Its value can be:
- File
- Registry
File
Action
How a file was modified.
- Create
- Modify
- Delete
Modify
Last Modified
The last time when a file was modified.
-
Viewing the File Change Records of All Servers
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.