Use to monitor specific changes to an endpoint, such as installed software, running services, processes, files, directories, listening ports, registry keys, and registry values
Data |
Description |
---|---|
Received |
The date and time Apex Central received the data from the managed product |
Generated |
The date and time the managed product generated the data |
Server |
The host name of the managed product server |
Change |
The change detected by the integrity rule |
User |
The logged on user name at the time of the event |
Process |
The process from which the event originated |
Type |
The type of registry key |
Key |
The registry key |
Rank |
The integrity rank |
Severity |
The severity level of the event |