A Detailed Comparison of File Integrity Monitoring Software Solutions

This report provides a comparative analysis of file integrity monitoring (FIM) software, which is a process used to validate the integrity of application software files and operating systems. It examines several popular FIM solutions, including Tripwire, Trustwave Endpoint Protection, ADAudit Plus, and Solarwinds Event and Log Manager. The report details the key features of each software, such as real-time change detection, threat and vulnerability management, active directory change tracking, and network performance monitoring. It also compares the platforms supported by each solution, their integration capabilities with incident management systems, and features like file analysis, checksum verification, and security updates. The report references external sources to support its analysis and provide a comprehensive overview of the FIM landscape.

Running head: FILE INTEGRITY
File Integrity
Name of the Student
Name of the University
Author Note

1FILE INTEGRITY
File Integrity Monitoring is and process or internal control that used for validating
integrity of application software files and operating system. There are several software available
to perform verification method between the current files and a known baseline. Some of the
most popular file integrity monitoring software are tripwire, Trustwave, ADAudit Plus and
Solidwinds. .
Tripwire: Tripwire gathers very detailed change data in real time then includes automatable
remediation detect and intelligence. This approach assist to detect any unplanned changed that
can effect compliance status (Tripwire, 2018). The data collected by Tripwire is highly
integrated with different security controls and also provide wide range of security solution. Some
key features of the Tripwire is:
 Reduce your Signal to Noise Ratio.
 Automation Helps Organizations Keep Up With the Workload.
 File Integrity Management and Security Controls.
Trustwave Endpoint Protection: Trustwave is an Endpoint Protection suite that utilizes light-
weight agent ("Trustwave: Smart Security On Demand", 2018). It is mainly used to monitor
registry file data and operating system on windows based devices like desktop, laptop and
servers. Key features of the Trustwave is followed:
 Threat management
 Vulnerability management
 Compliance Management
ADAudit Plus: ADAudit plus is a web based windows active directory also can be define as a
servers change reporting software which can utilized to track, audit and report on windows such

2FILE INTEGRITY
as workstations logon-logoff, active directory and file servers to ensure the compliance demands
and required security. The key features of the AD Audit Plus are followed:
 Active directory change tracking
 Windows Logon/ Logoff auditing
 Windows file server Auditing
Solarwinds: Solarwinds event and log manager software is virtual appliance, Solarwinds
positions LEM as an easy-to-deploy and use SIEM for resource-constrained security teams that
have no necessities for big data advanced analytics or malware detection integration
("FireCompass", 2018). LEM has integrations with SolarWinds' other products for operations
monitoring to support activities such as change detection and root cause analysis. Key features of
the Solarwinds are followed:
 Network performance Monitor
 Application and server Monitor
 Database performance Analyzer
 VMWARE and HYPER troubleshooting
 Traffic and bandwidth Patters
 Storage Performance and capacity
 Change and configuration Management
Features Tripwire Trustwave ADAudit Plus Solarwinds
Platform
Supported
 Windows
 Linux
 Mac
 Unix
 Windows
 Linux
 Public
 Clouds
 Windows
 RDBMS
 Windows,
 Linux,
 Mac,
 Unix

3FILE INTEGRITY
 RDBMS
Integration
With
 SIEM
 IDS
 Security and
patch updates
management
solution
 SIEM
 File
Reputation
Services
 Security and
patch
updates
management
solution
 SIEM
 IDS
 SIEM
 IAM
 File Reputation
Services
 IDS
 Security and
patch updates
management
solution
Incident
Manageme
nt
 Role-based
access for
monitored files
 Change
management(R
ectifying
erroneous
changes
 Quarantine
and Incident
isolation.
 Role-
based
access for
monitored
files
 Change
managem
ent(Rectif
ying
erroneous
changes
 Change
management(Re
ctifying
erroneous
changes
 Quarantine and
Incident
isolation
File
Analysis
 User-driven
tools for search
and
investigation
 Checksum
verification
 User-driven
tools for
search and
investigation
 Checksum
verification
 Checksum
verification
 User-driven tools
for search and
investigation
 Checksum
verification

4FILE INTEGRITY
Reference:
Durham, D., Khosravi, H., Blumenthal, U., & Long, M. (2014). U.S. Patent No. 8,839,450.
Washington, DC: U.S. Patent and Trademark Office.
FireCompass. (2018). Retrieved from https://www.firecompass.com/security/comparisons/file-integrity-
monitoring-fim/manageengine-adaudit-plus-vs-solarwinds-log-event-manager-for-fim-vs-
trustwave-endpoint-protection
Tripwire, I. (2018). Cyber Security Solutions With Foundational Controls - Tripwire. Retrieved
from https://www.tripwire.com/
Trustwave: Smart Security On Demand. (2018). Retrieved from https://www.trustwave.com/home/