Jump to content
aopromolla

File Integrity Monitor event logs

Recommended Posts

Hi, 

I've configured File Integrity Monitoring in Kaspersky Endpoint Security 10.1 for Windows Server as follow (with a KSC policy):

2.PNG.4a28c38355c8ef4c2a3767bd02226fcd.PNG3.PNG.26140e46fdae9bfdaa837fd9838c7d63.PNG

 

And in the event log when one of the file operations is triggered in the monitored area, I've got an event log like the following:

1.PNG.3f8d83e1bf1a696f85d40d5cc8761901.PNG

In this event log I don't have the name of the file or directory modified, and I don't have the details of the users that has made the action.

Is possible to have these informations regarding the name of the object modified and the name of the user?

This can be very usefull now with the new GDPR regulation.

Thanks

 

 

Share this post


Link to post

Hi,

I've the same products (KSC 10.5.1781 and KS 10.1 for Win Server), but after working with monitored folder (creating new files, for example) no events about File Integrity Monitor activities were generated.

Then I defined to run task by shedule 

image.png.ea23071aa9a29b5f531da0d3b9f7b60e.png

Checked events generated in the server with KS 10.1 and found next error

image.png.650fe485d350fbc2b176d194b180bd57.png

I have KESB Advanced license, so it means that other license is needed to use this module? Kaspersky Security for Storage, I guess?

Thanks for your help.

 

Share this post


Link to post
hace 6 horas, aopromolla dijo:

Hi Bernak, in my tests I'm using the Kaspersky Hybrid Cloud Security Enterprise license.

 

Hi Antonio, 

Thank you for your help, I'll try with that license.

But where can I find more information about Kaspersky licences that enable the use of File Integrity Monitor (in KS 10.1)?

Regards,

Share this post


Link to post
hace 21 minutos, aopromolla dijo:

Hi Bernak,

I've seens it on this slide

image.thumb.png.0f6d72ba66d46a885c3cdc382b806a5d.png

Hi Antonio,

Thank you again for your help. It's been very clarifying.

Regards.

Share this post


Link to post

×
×
  • Create New...

Important Information

We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.