KRMC Hosted - Settings Page - Server Settings - File Audit

Updated on Feb 20, 2026

KRMC Hosted Premium accounts have the ability to utilize the File Auditing feature.  When this feature is used, KRMC will receive file monitoring updates from active Defender devices reporting file modifications.   For more information on File Auditing, click HERE. This setting provides you the ability to selecting which events you want to view within the File Auditing Page on KRMC.  Note: File Auditing is only available with Premium KRMC Hosted accounts and on devices with KDM version of 5.6.7.5 or newer.

Large file events Any file 1gb or larger will trigger an event being recorded within Events.
Executable added/deleted An executable file being added or removed from the device will trigger an event being recorded within Events.
Multiple file creation If multiple files are added to the device, this trigger an event being recorded within Events.
Multiple file deletion If multiple files are removed to the device, this trigger an event being recorded within Events.
Keep received fines in server interval To save space on your server, you are able to dictate how long File Audit results remain on KRMC. The default setting is 30-days.