Segurança
Sep 07, 2026
The watchman doesn't know who you are — when integrity monitoring points at the administrator
On Saturday night I edited a script watched by the file integrity monitor and updated its baseline in the same block. Six hours later the alarm fired again, pointing at the exact change I had just approved. The monitor didn't fail: it did the only job it can do. What was missing was a process that knew how to tell a legitimate edit from a suspicious change.
Continue reading →