Directory
Tripwire software establishes a "digital inventory" of known good files and their attributes and uses it as a baseline for monitoring changes. Discovering State Change
User-scheduled integrity checks monitor files and their attributes, comparing them against the baseline. Changes are immediately pinpointed and appropriate IT staff can be notified by email or pager. Change event information can be integrated with other enterprise management systems and reporting packages.
Recovering from Undesired Change
Detailed reports and audit logs provide IT with a fast recovery path when change occurs. If the change is desirable?a scheduled software patch, for example?Tripwire makes it easy to verify these changes and roll them into the baseline for future monitoring. If the change is not desired, Tripwire software enables rapid restoration of files to a known good state. Controls can also be put in place to not only identify changes but to automatically restore systems when undesired change occurs
