Lakshan Sameera

Undergraduate

Cyber Security

🛡️ File Integrity Monitoring (FIM) System – Real-Time File Change Detection

Category: Blue Team | System Security | Incident Detection | PowerShell Automation
Timeline: August 2023 – September 2023
🔗 Project Article
🔗 GitHub Repository

The File Integrity Monitoring (FIM) System is a lightweight, PowerShell-based tool developed to track real-time changes in files and directories by maintaining a hash-based baseline. This project was built to enhance endpoint monitoring and alerting for unauthorized file modifications — a core requirement in modern cybersecurity defense and compliance strategies.

🧩 Project Overview:

This system enables users to:

Create a baseline snapshot of file hash values
Continuously monitor for modifications, additions, or deletions
Receive color-coded alerts for different file change statuses
Detect potentially malicious or unauthorized file system activity in real time

Ideal for cybersecurity labs, personal use, or small-scale enterprise monitoring, this project serves as an entry-level yet practical approach to host-based intrusion detection and data integrity enforcement.

🔧 Key Features:

Baseline Creation
- Computes and stores SHA256 hash values for all files in a monitored directory
- Saves the hash snapshot in original_hashcodes.txt for future comparison
Continuous Monitoring Mode
- Scans target directory at set intervals and compares current file hashes against the saved baseline
- Detects file additions, deletions, modifications, or unchanged files
Color-Coded Alerts
- 🟢 Green: New files added
- 🔵 Blue: Files unchanged
- 🟣 Magenta: Files modified
- 🔴 Dark Red: Files deleted
Cross-Platform Compatible
- Built using native PowerShell scripting
- Works on Windows and macOS (with PowerShell Core)
- No external dependencies required

🛠️ Technologies & Tools Used:

PowerShell 5.1+
SHA256 Hashing
Windows & macOS (Terminal / PowerShell Core)
GitHub (version control & documentation)

⚙️ Usage Workflow:

1️⃣ Create Baseline:

.\fim.ps1  # Then choose Option 1

Captures initial state and saves hashes to original_hashcodes.txt

2️⃣ Start Monitoring:

.\fim.ps1  # Then choose Option 2

Continuously monitors the files directory and alerts on changes

Interrupt Script:

macOS: Ctrl + C
Windows: Ctrl + Break

Folder Structure:

/files: Target directory for monitoring
fim.ps1: Main script
original_hashcodes.txt: Baseline hash record

🧠 Skills Demonstrated:

PowerShell automation & scripting
File system hashing & integrity checks
Custom alerting & user interaction in CLI
Understanding of host-based detection principles
Practical use of FIM techniques in compliance-driven environments (e.g., PCI-DSS, HIPAA)

✅ Outcome & Impact:

This project delivered a hands-on, functional solution for monitoring file integrity using simple but effective scripting techniques. It reinforced the importance of baseline comparisons, hash-based change detection, and proactive alerting as part of an organization’s defensive cybersecurity strategy. The project also demonstrated how custom-built security tooling can be used for training, audits, or lightweight production use in small environments.

🧰 Tech Stack (FIM):

PowerShell, Windows OS, macOS (PowerShell Core), SHA256 Hashing, GitHub, CLI-based Scripting

Showcase Your Work, Get Noticed!

Your projects deserve the spotlight! Share your best work, inspire others, and open doors to new opportunities. Whether you're a student or a pro, this is your stage to shine.

Get visibility from recruiters & peers
Build your portfolio & personal brand
Connect with like-minded developers

Let's put your work in front of the right people!

Similar Projects

Cyber Security

NmapOpenVASMetasploit FrameworkWHOISKali LinuxMeterpreter

Penetration Testing Simulation for Securing Organizational Systems (Penetration Testing - Ethical Hacking)

Penetration Testing Simulation for Securing Organizational Systems Conducted an in-depth penetration test and vulnerability assessment on a simulated...

View Project

Cyber Security

PythonPowerShellC#socketOpenCVPyAutoGUIrequeststhreadingip-apiWiresharkVMwareWindows 10Kali LinuxVisual StudioGitHub

🧠 Reverse Shell – Remote Administration Tool (RAT) (Hacking Tool - Offensive Security )

🧠 Reverse Shell – Remote Administration Tool (RAT) Category : Red Team | Remote Access | Malware Simulation | Ethical Hacking Timeline : June 2024...

View Project

Cyber Security

C#.NET Framework 4.5+Visual StudioWindows APISystem.Net.MailIP Geolocation APIGitHubWindows OSmacintoshpyautoguisocket``threading``cv2``numpy`

🧠 Key Logger with Email Notifications: A Comprehensive Cybersecurity Monitoring Tool (KeyLogger - Offensive Security Tool )

🧠 Key Logger with Email Notifications: A Comprehensive Cybersecurity Monitoring Tool Category : Red Team | Offensive Security | Malware Simulation ...

View Project

Cyber Security

Microsoft AzureOpenVASWindows 10 ProRDPRemote RegistrySSHNVT FeedFirefoxVLCAdobe ReaderVirtual NetworksAzure MarketplaceVirtual Machines

🔍 Enhancing Security Through Vulnerability Management - (OpenVas) (Security Vulnerability Assessment - OpenVas Greenbone)

🔍 Enhancing Security Through Vulnerability Management - (OpenVas) Category : Blue Team | Vulnerability Assessment | Risk Remediation Timeline : Jun...

View Project