Updated on 2024-11-15 GMT+08:00

Viewing File Change Records

File integrity monitoring provides change statistics, change types, and file change records, helping you learn about file changes in real time and detect malicious changes in a timely manner.

Viewing File Change Overview

  1. Log in to the management console.
  2. In the upper left corner of the page, select a region, click , and choose Security & Compliance > HSS.
  3. In the navigation pane, choose Server Protection > File Integrity Monitoring. Check the file change overview.

    You can select an enterprise project for filtering.

    Figure 1 File integrity monitoring page
    Table 1 File change overview parameters

    Parameter

    Description

    Overview

    Number of servers where files are changed.

    Changes

    • Total Changes: total number of file and registry changes.
    • File Changes: number of all file changes.
    • Registry Changes: number of registry changes.

    Action

    • Modify: total number of file and registry changes.
    • Create: total number of file and registry creations.
    • Delete: total number of file and registry deletions.

Viewing the File Change Records of a Single Server

  1. In the server list, you can view the number of files and registry changes on a servers and the time when they were last changed.

    Figure 2 Server list

  2. Click a server name to go to the server change details page. You can view the file change details of the server.

    Figure 3 Viewing file change records on a server
    Table 2 Server file change parameters

    Parameter

    Description

    Example Value

    File Name

    Name of a modified file.

    du

    Path

    Path of a modified file.

    -

    Change Description

    Description of the change.

    To view the change details, hover the cursor over the change content.

    SHA2560ba0c4b5e48e55a6 is changed to 4f6079f5b37d1513.

    Type

    Type of a modified file. Its value can be:

    • File
    • Registry

    File

    Action

    How a file was modified.

    • Create
    • Modify
    • Delete

    Modify

    Last Modified

    The last time when a file was modified.

    -

Viewing the File Change Records of All Servers

In the modified file list, you can view all file change records. For details, see Table 2.
Figure 4 Checking modified files