Integrity Monitoring

The Integrity Monitoring tab displays an overview of file and system activities monitored for integrity purposes for the selected device.  It helps determine the device's status and trustworthiness, identifying potential problems early.  The data is organized in 2 tabs - Dashboard and Inventory.

Dashboard

The Dashboard displays widgets for data visibility at a glance.  The widgets available are as follows:

• Actions 

The Actions widget displays a donut chart showing the distribution of actions performed (modified, added, deleted). 

The statistical data corresponding to a specific action is displayed upon hovering over the chart.

• Events

The Events widget displays a line graph showing the trend of events over time, categorized by modified, added, and deleted actions.

The statistical data corresponding to a specific action over time is displayed upon hovering over the chart.

• Most Active Users

The Most Active Users widget displays a donut chart showing the most active user groups on the selected device.

The statistical data corresponding to the most active user is displayed upon hovering over the chart. 

• Files Added

The Files Added widget displays a donut chart indicating the total number of files added and the associated distribution of the additions across various HKEY_LOCAL_ registry keys.

The statistical data for a specific registry key where the files are added is displayed upon hovering over the chart.

• Files Modified

The Files Modified widget displays a donut chart indicating the total number of files modified and the distribution of the modifications across various HKEY_LOCAL_ registry keys.

The statistical data for a specific registry key where the files are modified is displayed upon hovering over the chart.

• Files Deleted

The Files Deleted widget displays a donut chart showing the total number of deleted files, detailing the distribution of these deletions across various  HKEY_LOCAL_ registry keys.

The statistical data for a specific registry key from which the files are deleted is displayed upon hovering over the chart.

Inventory

The Inventory tab displays two tables representing data associated with the files and Windows Registry that are monitored for their integrity within the selected device.  The tables available are as follows:

• Files

The Files table displays a list of files with details including their path, last modified date, user who modified them, user ID, and file size.

• Windows Registry

The Windows Registry table displays registry keys monitored for integrity with their last modified dates, for the selected device.