Documentation forSecurity Event Manager

Start a FIM driver

File Integrity Monitoring (FIM) monitors all file types for unauthorized changes. Using FIM, you can detect changes to critical files to ensure systems have not been compromised.

  1. On the SEM Console, navigate to Configure > Nodes.
  2. Under Refine Results, expand the Type group, and select Agent.

  3. In the FIM driver group, select Stopped.
  4. Select an agent to view the configuration toolbar.
  5. From the More drop-down list, select Start FIM Driver.

  6. Upon successful configuration, a success dialog appears in the upper-right console.

From the More drop-down list, you can start an FIM driver, and enable or disable FIM on Agent startup.