The concept of FIM is elegant, but the implementation is often fraught with "alert fatigue." Operating systems and applications change constantly. A simple software update, a patch management cycle, or even a user changing a setting can trigger a flood of FIM alerts.
Symantec Endpoint Security: Mastering File Integrity Monitoring symantec endpoint protection file integrity monitoring
: