Chapter
13
13. Inspector: Monitoring
Filesystem Integrity
13.1. Function and Features
The Inspector program is an integrity checker running under the xBSD op-
erating system. Inspector performs the following functions:
•
monitors the defined location for changes.
•
checks for viruses in the defined location and removes them.
Unlike the Scanner and the Daemon programs, while searching
for viruses Inspector is not guided by virus-definitions in the cor-
responding databases. The program identifies viruses in an ob-
ject with respect to the methods that have been used by a virus
to penetrate the file.
•
removes the detected virus (including the unknown viruses) from
the object or transfers it to the Daemon program.
While checking for changes in the defined location, Inspector collects the
location details and saves them to the database. Whenever started up
again Inspector rescans the location and checks the newly collected data
219
