Tracking File Checksum

This feature helps to check if the files are tampered. By default, Track File Checksum is enabled for SYSTEM32 (C:\WINDOWS\system32) folder for all monitored systems. When you enable feature, WhatChanged tracks file checksum for all files and sub-folders associated with chosen folder in this case for system32 folder.

To view file checksum

1. Open the Change Browser.

2. Double-click a system to load.

3. Select Full View or Change View.

4. Expand Drives hive and click system32.

WhatChanged displays the sub-folders and the files associated with the selected folder.

5. Double-click an item in the right pane.

WhatChanged displays the Compare Details window with checksum details.

To enable file checksum tracking

1. Open the Change Browser.

2. Double-click a system to load.

3. Select Full View or Change View.

4. Expand Drives hive and right-click a folder.

WhatChanged displays the shortcut menu.

From the shortcut menu, choose Track File Checksum to track file checksum for the local system.

(OR)

Choose Track File Checksum (All Systems) to track file checksum for all monitored systems.