DAY 4 · MODULE 5
File Integrity Monitoring
Detect unexpected content changes by comparing known-good and current cryptographic hashes.
Understand the concept
Baseline
SHA-256
Known-good hash
Current hash
Change detection
Integrity alert
Why this matters
Integrity monitoring helps defenders notice unauthorized or unexpected changes to important files and configurations.
See what happens internally
Interactive visualization loads here.
Stage 2 Interactive Lab
Open Interactive LabOperate this concept in a larger realtime simulation and save your practical score.
Perform the activity
- Use the SHA-256 visualizer.
- Run the browser file-integrity concept code.
- Change simulated file content.
- Verify that the hash comparison produces an alert.
Workshop safety: Activities involving scanning, web vulnerabilities or security testing must be performed only on the assigned training target or intentionally vulnerable lab.
Read and understand the working example
original_hash = sha256(original)
current_hash = sha256(current)
print(original_hash == current_hash)Open in Browser Code LabProve your understanding
Extend the Python exercise to compare two simulated configuration files and report which one changed.