Monitor file integrity (FIM) with syscheck

40 min Debian 12

Objective

Know that a sensitive file was modified, added or deleted, by whom and when. You understand the concept of a baseline, you configure the Wazuh syscheck module and you know how to interpret its alerts during an investigation.

This lesson is part of the full course

Unlock SOC Analyst with Wazuh: Detecting and Responding to Attacks to read every lesson, do the exercises, access the simulations and earn your certificate.

Buy — 290 MAD All-access pass — 1,490 MAD

Already enrolled? Log in.