# Auditbeat on windows for FIM
**URL:** https://discuss.elastic.co/t/auditbeat-on-windows-for-fim/154255
**Category:** Beats
**Tags:** auditbeat
**Created:** [October 26, 2018, 9:21pm UTC](https://discuss.elastic.co/t/auditbeat-on-windows-for-fim/154255 "2018-10-26T21:21:56Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)
#### Post date: [October 26, 2018, 9:21pm UTC](https://discuss.elastic.co/t/auditbeat-on-windows-for-fim/154255/1 "2018-10-26T21:21:56Z")
Hi There,
Is it possible use auditbeat to monitor ( FIM ) for windows for network file shares or windows file shares for GDPR , if we have some confidential data, is it possible to mention the path of the shared folders of network file shares or windows file shares in auditbeat.yml rather than using winlogbeat security logs (where it works with combination of two or more windows events )
Thanks,
Raj
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [October 27, 2018, 12:40am UTC](https://discuss.elastic.co/t/auditbeat-on-windows-for-fim/154255/2 "2018-10-27T00:40:11Z")
What is FIM?
---
### Author:  [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)
#### Post date: [October 27, 2018, 1:05pm UTC](https://discuss.elastic.co/t/auditbeat-on-windows-for-fim/154255/3 "2018-10-27T13:05:52Z")
Sorry for misunderstanding [https://www.elastic.co/guide/en/beats/auditbeat/current/auditbeat-module-file\_integrity.html](https://www.elastic.co/guide/en/beats/auditbeat/current/auditbeat-module-file_integrity.html)
File integrity module 🙂
---
### Author:  [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [October 29, 2018, 1:21pm UTC](https://discuss.elastic.co/t/auditbeat-on-windows-for-fim/154255/4 "2018-10-29T13:21:15Z")
Winlogbeat uses [ReadDirectoryChangesW](https://docs.microsoft.com/en-us/windows/desktop/api/winbase/nf-winbase-readdirectorychangesw) to monitor for changes. So it depends as you'll see if you take a look at Microsoft documentation for that function. It looks some filesystem types might work. Give it a try.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 19, 2018, 1:21pm UTC](https://discuss.elastic.co/t/auditbeat-on-windows-for-fim/154255/5 "2018-11-19T13:21:16Z")
This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.