---
title: "File Integrity Monitoring"
slug: "file-integrity-monitoring"
abstract: "FIM detects system file changes to identify attacks. With Azure Monitor Agent and Log Analytics Agent deprecated, use Microsoft Defender for Endpoint. FIM using Microsoft Defender for Endpoint is in preview and might be unstable."
---
# File Integrity Monitoring

File Integrity Monitoring (FIM) examines operating system files, Windows registries, application software, and Linux system files for changes that might indicate an attack.

The only way to enable FIM after the deprecation of [Azure Monitor Agent (AMA)](https://learn.microsoft.com/en-us/azure/defender-for-cloud/file-integrity-monitoring-enable-ama) and [Log Analytics agent (MMA)](https://learn.microsoft.com/en-us/azure/defender-for-cloud/file-integrity-monitoring-enable-log-analytics) is by using [Microsoft Defender for Endpoint](https://learn.microsoft.com/en-us/azure/defender-for-cloud/file-integrity-monitoring-enable-defender-endpoint). 

## Microsoft Defender for Endpoint

[Microsoft Defender for Endpoint](https://learn.microsoft.com/en-us/defender-endpoint/microsoft-defender-endpoint) is an enterprise endpoint security platform designed to help organizations prevent, detect, investigate, and respond to advanced threats. 

> [!warning]
> Be aware that FIM using Microsoft Defender for Endpoint is currently in preview. As such, this feature is still under development and might not be fully stable. By enabling this feature, you acknowledge and accept the potential risks, including limited support, potential functionality changes, and the possibility of service disruptions. Microsoft does not provide any service-level agreements (SLAs) for preview features, and they should not be used in production environments.

### Prerequisite

Enable **Microsoft Defender for Servers Plan 2**  (refer to the [Microsoft Defender for Cloud pricing](https://azure.microsoft.com/en-us/pricing/details/defender-for-cloud/) page for associated costs), along with its subcategories: *Endpoint protection* and *agentless scanning*.