IL3 (Detect and Resist) Controls
Changes detected to files within system folders.
All critical host messages at Warning status or below (servers and selected workstations).
Any changes to system configuration (or registry) settings any host.
Change in status of system processes on monitored hosts.