nav-img
Advanced

Checking Change Statistics

You can check the number and types of changes, the number of modified files and registries on a server, and change details to find malicious changes in a timely manner.

Checking Change Statistics

  1. Log in to the management console.
  2. In the upper left corner of the page, select a region, click , and choose Security > Host Security Service.
  3. Go to the Critical Files page to check change statistics, as shown in Figure 1.

    Figure 1 Checking change statistics


    Table 1 Change statistics

    Item

    Description

    Servers

    Total number of managed servers

    Changes

    • Changes: total number of modifications in monitored files
    • Files: total number of files
    • Registries: total number of registries

    Actions

    • Modify: total number of changes in monitored files
    • Create: total number of created files
    • Delete: total number of deleted files

Checking Modified Files on a Single Server

  1. In the server list, check modified files and registries on a server, and the time when they were modified.

    Figure 2 Server list


  2. Click a server name and check its change statistics above the displayed list, including the total number of changes, number of modified files, and number of modified registries, as shown in Figure 3.

    Note

    You can click Search to expand the advanced search area. Here you can search for a server by its name and the time when changes were made.

    Figure 3 Server change details


  3. Check the change details of the files and registries in the file list of the server.

    The details include including the file and registry names and types, paths, changed content, actions, and time when changes were made.

    Note
    • You can enter a name or path to search for a file or registry.
    • You can click Search to expand the advanced search area. Here you can search for a server by Name, Path, Type, Action, and Time Range.

Checking All the Modified Files

You can check all the change files and registries on your servers, including their names, paths, description, server names, actions, and the time when they were changed, as shown in Figure 4.

Figure 4 Changed files


Note
  • You can enter a name or path to search for a file or registry.
  • You can click Search to expand the advanced search area. Here you can search for a server by Name, Path, Type, Action, and Time Range.