File Diary

The ObserveIT File Diary provides information about all tracked file activities that occurred on ObserveIT monitored endpoints. Tracking file-related events and metadata (including the lifecycle history of each tracked file) can help security and risk analysts potentially identify instances of data exfiltration.

The File Diary has two views:

• File Activity View: provides details of all file activity that occurred on monitored endpoints. You can filter the view to display activity that occurred on specific files.

• File History View: displays the history of all actions and events that occurred on a specific tracked file.