Use cases

The Wazuh FIM module monitors directories to detect file changes, additions, and deletions, making it useful for monitoring important files on endpoints. Use it for change management, regulatory compliance, and detecting cyberattacks. Below are examples:

• Detect malware persistence technique
• Detect account manipulation
• Monitor files at specific intervals
• Report file changes
• Monitor configuration changes