by Ed Rarick
What to monitor The first step in FIM is controlling what is monitored. There is no practical reason to monitor every file on every device or application all of the time. Tripwire provides a robust rules-based way to control which files are monitored for change and to what level they are monitored. Tripwire harvests more [...]
Read More
by Ed Rarick
Once upon a time there was Change Audit. It was invented by Tripwire and it was good. Then along came VISA CISP (Cardholder Information Security Program) in June, 2001 and Change Audit had a makeover. It was renamed File Integrity Monitoring—or FIM for short—and referenced in requirements 10.5 and 11.5 of the CISP specification. So [...]
Read More