File Integrity Monitoring (FIM)

CimTrak - Security Auditing
CimTrak works by detecting additions, deletions, and modifications to files, configurations, and/or settings. Upon initial configuration. CimTrak takes a ìsnapshotî of what needs to be monitored and stores them securely in the CimTrak Master Repository.

This establishes a known, trusted baseline. From there, CimTrak receives data from the various CimTrak agents and modules. When the data received does not match the cryptographic hash of a particular file, configuration, or setting, a change has occurred, and CimTrak takes action. Depending on how CimTrak is configured, alerts via SMTP and Syslog are sent out, and instant or manual change remediation efforts can take place if desired. CimTrak Master Repository securely stores files and configurations and performs comparisons to detect changes. If changes are unwanted, a manual or automated roll-back and remediation to a previously known and trusted state can occur.