SYNOTI / FIM & Rootcheck
FIM & Rootcheck
File integrity and rootkit detection · 1.2M files monitored.
Dashboard
FIM Events
Rootcheck
Monitored Files
1.2M
baseline
FIM Events / 24h
1.2M
real-time + scheduled
Rootkits
0
detected
SHA256 Baselines
1.9M
verified
FIM Events
| Time | File | Event | Agent |
|---|---|---|---|
| 18:41:58 | /var/www/backdoor.php | Added | www-03 |
| 18:26:33 | /etc/group | Modified | app-06 |
| 12:02:47 | /etc/shadow | Modified | mysql-02 |
| 11:31:09 | /etc/ssh/sshd_config | Modified | proxy-02 |
FIM Events / 24h
Events by Action
Recent Activity
View allRansomware behavior blocked on mail-01 CRITICAL
Playbook PB-041 auto-contained host · Ryuk TTPs matched
SSH brute force from 203.0.113.42 HIGH
42 failed logins in 60s · source IP blocked
Threat hunt matched T1059.001 on www-02
PowerShell obfuscation · confidence 0.91
SCA scan completed on 128 hosts
98.2% compliance · 11 benchmarks passed
Firewall rule 'BLK-3321' propagated to 14 nodes
0.4s propagation · geo-blocked 12 CIDRs
Sandbox verdict — 'invoice_9921.exe' malicious
Heuristic score 96 · family 'Emotet'