Integrity monitoring Enabled Disabled
Identify changes in content, permissions, ownership and attributes of files
General Monitored Ignored No diff Who-data
General
The settings shown below are applied globally
JSON  ·  XML
Ignored files and directories
These files and directories are ignored from the integrity scan
JSON  ·  XML
Path
{{path}}
Ignored
A list of registry entries that will be ignored
JSON  ·  XML
Entry Arch
{{registry.entry}} {{registry.arch}}
Monitored directories
These directories are included on the integrity scan
JSON  ·  XML
{{item.dir}}
Monitored
A list of registry entries that will be monitored
JSON  ·  XML
Entry Arch
{{registry.entry}} {{registry.arch}}
No diff directories
This files won't have their diff calculated
JSON  ·  XML
Path
{{path}}
Who-data audit keys
Wazuh will include in its FIM baseline those events being monitored by Audit using audit_key.
JSON  ·  XML
No audit keys were found. Visit the documentation on this link to enable it.
Keys
{{auditkey}}
More info about this section Integrity monitoring documentation Syscheck reference