RT-FIM events for accessed mount points do not show the filename in DCS 6.5 and newer
Article ID: 164746
Updated On:
Products
Data Center Security Server Advanced
Cause
This is functioning as designed.
Resolution
The Real Time File Integrity Monitor (RT-FIM) does not report the name of the mountpoint when accessed but actually reports the path to the shared location instead.
For example:
If a mount point has the foldername of MountShare1 to the path of K:\dfsroots\shared the RT-FIM event will report the access to K:\dfsroots\shared
For example:
If a mount point has the foldername of MountShare1 to the path of K:\dfsroots\shared the RT-FIM event will report the access to K:\dfsroots\shared
Feedback
Yes
No
Powered by
