Can Auditbeat file integrity module detect unmount and mount of CIFS filesystem

Elastic Stack Beats
1

Hi Community,

Can I use the Auditbeat file integrity module to detect if a share (Windows and CIFS) is mounted and unmounted? Any risc of Auditbeat to block unmounting the share?

Best regards
Flemming

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.