Jump to content

File Integrity Monitor event logs

Recommended Posts


I've configured File Integrity Monitoring in Kaspersky Endpoint Security 10.1 for Windows Server as follow (with a KSC policy):



And in the event log when one of the file operations is triggered in the monitored area, I've got an event log like the following:


In this event log I don't have the name of the file or directory modified, and I don't have the details of the users that has made the action.

Is possible to have these informations regarding the name of the object modified and the name of the user?

This can be very usefull now with the new GDPR regulation.




Share this post

Link to post


I've the same products (KSC 10.5.1781 and KS 10.1 for Win Server), but after working with monitored folder (creating new files, for example) no events about File Integrity Monitor activities were generated.

Then I defined to run task by shedule 


Checked events generated in the server with KS 10.1 and found next error


I have KESB Advanced license, so it means that other license is needed to use this module? Kaspersky Security for Storage, I guess?

Thanks for your help.


Share this post

Link to post
hace 6 horas, aopromolla dijo:

Hi Bernak, in my tests I'm using the Kaspersky Hybrid Cloud Security Enterprise license.


Hi Antonio, 

Thank you for your help, I'll try with that license.

But where can I find more information about Kaspersky licences that enable the use of File Integrity Monitor (in KS 10.1)?


Share this post

Link to post
hace 21 minutos, aopromolla dijo:

Hi Bernak,

I've seens it on this slide


Hi Antonio,

Thank you again for your help. It's been very clarifying.


Share this post

Link to post

  • Create New...

Important Information

We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.