> FIM Test: A Method for Distinguishing True FIM Capabilities in a Crowd of Claims

In a previous blog, we presented NIST's benchmark definition of integrity monitoring. The conclusion was clear: Many vendor claims of file integrity monitoring (FIM) capabilities do not match this definition. Change detection across system components, including files, is crucial and implemented in many tools, including EDR/XDR. However, while these systems often claim FIM capabilities, file change detection alone falls short of true FIM. The post FIM Test: A Method for Distinguishing True FIM Capabilities in a Crowd of Claims appeared first on Security Boulevard.