|
|
The File Watch module reports changes to files since the last snapshot update and violations of template settings. In addition, the module does the following:
Creates and maintains an agent snapshot file named fwatch.dat to detect file changes
Looks for the files with file names or signature patterns that match specified names and patterns
Searches for malicious files and compares the file signatures with snapshot or template files, depending on the enabled checks