File integrity monitoring (FIM)

Also written: FIM

A host-based feature that keeps a hash of important files and alerts when one changes. A changed system program is a classic sign of an intruder.

Where the book teaches it