Integra v1.3

v1.3: Change Notifications

This version features support for "Change Notifications" from Windows, which trigger verification process on recently modified objects. It runs in separate thread and does not interfere with regular timer-based checks. Currently supporting "directory" objects (registry checks are still on timer basis).

Integra v1.2

v1.2: new Uninstall option

This release has new uninstall option. Run as administrator.

About

Integra is a service to control integrity of user-defined objects. An object is either a file, directory, or registry key. Integrity is verified against object snapshots - something similar to OS restore points.

Service performs checks in a set time interval (default: 30 min). Reports verification errors to Event Log.

Usage

1. Install Integra service: integra.exe install *
2. (optional) Change path to Object List: integra.exe list path "C:\path\to\list.json" *
3. (optional) Change delay (ms) between checks: integra.exe interval 1800000 *
4. Start service from Services menu or with sc start Integra *
5. To add file / directory: integra.exe addFile "C:\path\folder"
6. To add registry key: integra.exe addReg "HKEY_SAMPLE_KEY\Path\Key"
7. (optional) Verify on-demand from terminal: integra.exe verify
8. View results: open EventVwr.exe (go to Windows Logs/Application)

* requires administrative privileges (Run as Admin)

For security reasons, it is recommended to store Object List under write-protected location, where write access is restricted to administrators only.

Warning: this version does not support non-ANSI paths and file names. Those will be excluded from checks.

Integra v1.1

Integra v1.1

Fixes

• Fixed default check interval (if no value in registry) being 0 ms. Now it is 30 minutes.
• Fixed registry value CheckIntervalMS creating as REG_SZ. Now it is DWORD.

Integra v1.0

Integra release

Integra is a service to control integrity of user-defined objects. An object is either a file, directory, or registry key. Integrity is verified against object snapshots - something similar to OS restore points.

Service performs checks in a set time interval (default: 30 min). Reports verification errors to Event Log.

Usage

1. Install Integra service: integra.exe install *
2. (optional) Change path to Object List: integra.exe list path "C:\path\to\list.json" *
3. (optional) Change delay (ms) between checks: integra.exe interval 1800000 *
4. Start service from Services menu or with sc start Integra *
5. To add file / directory: integra.exe addFile "C:\path\folder"
6. To add registry key: integra.exe addReg "HKEY_SAMPLE_KEY\Path\Key"
7. (optional) Verify on-demand from terminal: integra.exe verify
8. View results: open EventVwr.exe (go to Windows Logs/Application)

* requires administrative privileges (Run as Admin)

For security reasons, it is recommended to store Object List under write-protected location, where write access is restricted to administrators only.

Warning: this version does not support non-ANSI paths and file names. Those will be excluded from checks.