Use cases

The ThreatLockDown FIM module monitors directories to detect file changes, additions and deletions. This module is useful for monitoring important files on endpoints. You can use the FIM module for several purposes such as change management processes, regulatory compliance, and detecting cyberattacks. Below are examples of some use cases of the ThreatLockDown FIM module.

• Detecting malware persistence technique
• Detecting account manipulation
• Monitoring files at specific intervals
• Reporting file changes
• Monitoring configuration changes