[{"data":1,"prerenderedAt":1005},["ShallowReactive",2],{"docs-index-page":3,"docs-index-pages":87},{"id":4,"title":5,"body":6,"description":79,"extension":80,"meta":81,"navigation":82,"path":83,"seo":84,"stem":85,"__hash__":86},"docs\u002Fdocs\u002Findex.md","Documentation",{"type":7,"value":8,"toc":73},"minimark",[9,13,17,22,48,52],[10,11,5],"h1",{"id":12},"documentation",[14,15,16],"p",{},"Welcome to the Bitfy docs. Use these guides to install agents, approve baselines, and produce compliance-ready File Integrity Monitoring evidence.",[18,19,21],"h2",{"id":20},"start-here","Start here",[23,24,25,34,41],"ul",{},[26,27,28,33],"li",{},[29,30,32],"a",{"href":31},"\u002Fdocs\u002Fgetting-started\u002Fintroduction\u002F","Introduction"," — what Bitfy monitors and why it matters",[26,35,36,40],{},[29,37,39],{"href":38},"\u002Fdocs\u002Fgetting-started\u002Finstallation\u002F","Installation"," — install an agent on your first host",[26,42,43,47],{},[29,44,46],{"href":45},"\u002Fdocs\u002Fgetting-started\u002Fquickstart\u002F","Quickstart"," — baseline a path and receive your first alert",[18,49,51],{"id":50},"explore-by-topic","Explore by topic",[23,53,54,61,67],{},[26,55,56,60],{},[57,58,59],"strong",{},"Configuration"," — agents, baselines, and alert routing",[26,62,63,66],{},[57,64,65],{},"Guides"," — path scoping, compliance evidence, and integrations",[26,68,69,72],{},[57,70,71],{},"Reference"," — CLI, API, and FAQ",{"title":74,"searchDepth":75,"depth":75,"links":76},"",2,[77,78],{"id":20,"depth":75,"text":21},{"id":50,"depth":75,"text":51},"Learn how to install, configure, and operate Bitfy File Integrity Monitoring.","md",{},true,"\u002Fdocs",{"title":5,"description":79},"docs\u002Findex","hlmztODRAzuxeqE0I-mO24xbgJojxGm1g0EbLpC3i8A",[88,168,310,404,483,535,601,666,722,765,847,912,960],{"id":89,"title":32,"body":90,"description":162,"extension":80,"meta":163,"navigation":82,"path":164,"seo":165,"stem":166,"__hash__":167},"docs\u002Fdocs\u002F1.getting-started\u002F1.introduction.md",{"type":7,"value":91,"toc":152},[92,95,98,102,116,120,125,128,132,135,139,142,146],[10,93,32],{"id":94},"introduction",[14,96,97],{},"Bitfy is File Integrity Monitoring for critical files, configs, binaries, and certificates. It establishes approved baselines, detects unauthorized change in real time, and keeps immutable evidence for investigations and audits.",[18,99,101],{"id":100},"what-bitfy-monitors","What Bitfy monitors",[23,103,104,107,110,113],{},[26,105,106],{},"File content hashes and metadata",[26,108,109],{},"Permission and ownership drift",[26,111,112],{},"Creates, edits, deletes, and renames on scoped paths",[26,114,115],{},"Host coverage across servers, VMs, and container hosts",[18,117,119],{"id":118},"core-concepts","Core concepts",[121,122,124],"h3",{"id":123},"baselines","Baselines",[14,126,127],{},"A baseline is a known-good snapshot of scoped paths. Once approved, Bitfy compares every subsequent change against that state.",[121,129,131],{"id":130},"change-feed","Change feed",[14,133,134],{},"The change feed lists integrity events with context — what changed, when it changed, and whether the change was expected.",[121,136,138],{"id":137},"evidence","Evidence",[14,140,141],{},"Bitfy retains immutable event history so teams can export auditor-ready FIM reports for frameworks such as PCI DSS, SOC 2, ISO 27001, and HIPAA.",[18,143,145],{"id":144},"next-steps","Next steps",[14,147,148,149,151],{},"Continue with ",[29,150,39],{"href":38}," to deploy your first agent.",{"title":74,"searchDepth":75,"depth":75,"links":153},[154,155,161],{"id":100,"depth":75,"text":101},{"id":118,"depth":75,"text":119,"children":156},[157,159,160],{"id":123,"depth":158,"text":124},3,{"id":130,"depth":158,"text":131},{"id":137,"depth":158,"text":138},{"id":144,"depth":75,"text":145},"What Bitfy File Integrity Monitoring covers and how the control model works.",{},"\u002Fdocs\u002Fgetting-started\u002Fintroduction",{"title":32,"description":162},"docs\u002F1.getting-started\u002F1.introduction","XHFeITYkxfKYhUjNRqt44b7NzugN2H0xKN86AeBAsBs",{"id":169,"title":39,"body":170,"description":304,"extension":80,"meta":305,"navigation":82,"path":306,"seo":307,"stem":308,"__hash__":309},"docs\u002Fdocs\u002F1.getting-started\u002F2.installation.md",{"type":7,"value":171,"toc":298},[172,175,178,182,193,197,220,268,272,275,286,288,294],[10,173,39],{"id":174},"installation",[14,176,177],{},"Install a Bitfy agent on each host you want to monitor. Agents are lightweight, watch scoped paths, and stream integrity events to your Bitfy workspace.",[18,179,181],{"id":180},"requirements","Requirements",[23,183,184,187,190],{},[26,185,186],{},"Linux, Windows Server, or container host with outbound HTTPS",[26,188,189],{},"Ability to install a system service or daemon",[26,191,192],{},"Network access to your Bitfy control plane",[18,194,196],{"id":195},"install-the-agent","Install the agent",[198,199,200,207,210,213],"ol",{},[26,201,202,203,206],{},"Sign in to Bitfy and open ",[57,204,205],{},"Hosts → Add host",".",[26,208,209],{},"Copy the install command for your operating system.",[26,211,212],{},"Run the command with sufficient privileges to create a service.",[26,214,215,216,219],{},"Confirm the host appears as ",[57,217,218],{},"Online"," in the dashboard.",[221,222,226],"pre",{"className":223,"code":224,"language":225,"meta":74,"style":74},"language-bash shiki shiki-themes github-dark","curl -fsSL https:\u002F\u002Fget.bitfy.dev\u002Finstall.sh | sudo bash -s -- --token YOUR_TOKEN\n","bash",[227,228,229],"code",{"__ignoreMap":74},[230,231,234,238,242,246,250,253,256,259,262,265],"span",{"class":232,"line":233},"line",1,[230,235,237],{"class":236},"svObZ","curl",[230,239,241],{"class":240},"sDLfK"," -fsSL",[230,243,245],{"class":244},"sU2Wk"," https:\u002F\u002Fget.bitfy.dev\u002Finstall.sh",[230,247,249],{"class":248},"snl16"," |",[230,251,252],{"class":236}," sudo",[230,254,255],{"class":244}," bash",[230,257,258],{"class":240}," -s",[230,260,261],{"class":240}," --",[230,263,264],{"class":240}," --token",[230,266,267],{"class":244}," YOUR_TOKEN\n",[18,269,271],{"id":270},"verify-connectivity","Verify connectivity",[14,273,274],{},"After install, the agent registers the host and begins heartbeats. If the host stays offline:",[23,276,277,280,283],{},[26,278,279],{},"Confirm outbound HTTPS is allowed",[26,281,282],{},"Check the agent service status",[26,284,285],{},"Re-run registration with a fresh token",[18,287,145],{"id":144},[14,289,290,291,293],{},"Move on to ",[29,292,46],{"href":45}," to scope paths and approve a baseline.",[295,296,297],"style",{},"html pre.shiki code .svObZ, html code.shiki .svObZ{--shiki-default:#B392F0}html pre.shiki code .sDLfK, html code.shiki .sDLfK{--shiki-default:#79B8FF}html pre.shiki code .sU2Wk, html code.shiki .sU2Wk{--shiki-default:#9ECBFF}html pre.shiki code .snl16, html code.shiki .snl16{--shiki-default:#F97583}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}",{"title":74,"searchDepth":75,"depth":75,"links":299},[300,301,302,303],{"id":180,"depth":75,"text":181},{"id":195,"depth":75,"text":196},{"id":270,"depth":75,"text":271},{"id":144,"depth":75,"text":145},"Install the Bitfy agent and connect your first host.",{},"\u002Fdocs\u002Fgetting-started\u002Finstallation",{"title":39,"description":304},"docs\u002F1.getting-started\u002F2.installation","50_J76-RgdsqSJCW6tes5WE_2DOUWwqnc9-INWVGPCU",{"id":311,"title":46,"body":312,"description":398,"extension":80,"meta":399,"navigation":82,"path":400,"seo":401,"stem":402,"__hash__":403},"docs\u002Fdocs\u002F1.getting-started\u002F3.quickstart.md",{"type":7,"value":313,"toc":392},[314,317,320,324,331,345,348,352,355,359,362,373,377,384],[10,315,46],{"id":316},"quickstart",[14,318,319],{},"Get from a connected host to live File Integrity Monitoring in a few minutes.",[18,321,323],{"id":322},"_1-scope-critical-paths","1. Scope critical paths",[14,325,326,327,330],{},"Open ",[57,328,329],{},"Baselines → New policy"," and add the paths that matter most:",[23,332,333,336,339,342],{},[26,334,335],{},"System binaries and shared libraries",[26,337,338],{},"Application configs and secrets mounts",[26,340,341],{},"Web roots and deployment artifacts",[26,343,344],{},"Certificate and key directories",[14,346,347],{},"Start narrow. Expand coverage after alerts are tuned.",[18,349,351],{"id":350},"_2-capture-and-approve-a-baseline","2. Capture and approve a baseline",[14,353,354],{},"Run an initial scan, review the inventory, then approve the known-good state. Bitfy only treats later differences as integrity events once a baseline is approved.",[18,356,358],{"id":357},"_3-confirm-alert-delivery","3. Confirm alert delivery",[14,360,361],{},"Send a controlled test change to a scoped file and verify:",[23,363,364,367,370],{},[26,365,366],{},"The event appears in the change feed",[26,368,369],{},"Severity and path context look correct",[26,371,372],{},"Notifications reach your preferred channel",[18,374,376],{"id":375},"_4-export-evidence","4. Export evidence",[14,378,379,380,383],{},"From ",[57,381,382],{},"Compliance",", generate a sample FIM evidence pack to confirm reporting works for your audit workflow.",[14,385,386,387,391],{},"You are ready for production monitoring. Continue with ",[29,388,390],{"href":389},"\u002Fdocs\u002Fconfiguration\u002Fagents\u002F","Agents"," for host-scale configuration.",{"title":74,"searchDepth":75,"depth":75,"links":393},[394,395,396,397],{"id":322,"depth":75,"text":323},{"id":350,"depth":75,"text":351},{"id":357,"depth":75,"text":358},{"id":375,"depth":75,"text":376},"Scope critical paths, approve a baseline, and receive your first integrity alert.",{},"\u002Fdocs\u002Fgetting-started\u002Fquickstart",{"title":46,"description":398},"docs\u002F1.getting-started\u002F3.quickstart","5WI2iZjfGOVXABw7J1RT7wj72ms9S3dsm609pwoXMdc",{"id":405,"title":390,"body":406,"description":477,"extension":80,"meta":478,"navigation":82,"path":479,"seo":480,"stem":481,"__hash__":482},"docs\u002Fdocs\u002F2.configuration\u002F1.agents.md",{"type":7,"value":407,"toc":472},[408,411,414,418,421,435,439,446,465,469],[10,409,390],{"id":410},"agents",[14,412,413],{},"Agents collect integrity signals on each host and send them to Bitfy. Keep agents online, grouped by environment, and updated with your rollout process.",[18,415,417],{"id":416},"host-groups","Host groups",[14,419,420],{},"Use host groups to apply shared path policies across similar systems:",[23,422,423,426,429,432],{},[26,424,425],{},"Production app servers",[26,427,428],{},"Jump hosts and bastions",[26,430,431],{},"Container worker nodes",[26,433,434],{},"Database servers",[18,436,438],{"id":437},"agent-health","Agent health",[14,440,441,442,445],{},"Monitor agent status from ",[57,443,444],{},"Hosts",":",[23,447,448,453,459],{},[26,449,450,452],{},[57,451,218],{}," — heartbeats are current",[26,454,455,458],{},[57,456,457],{},"Degraded"," — delayed scans or partial reporting",[26,460,461,464],{},[57,462,463],{},"Offline"," — no recent heartbeat",[18,466,468],{"id":467},"upgrades","Upgrades",[14,470,471],{},"Roll agent updates in stages. Validate on a canary group before production fleets.",{"title":74,"searchDepth":75,"depth":75,"links":473},[474,475,476],{"id":416,"depth":75,"text":417},{"id":437,"depth":75,"text":438},{"id":467,"depth":75,"text":468},"Manage Bitfy agents, host groups, and coverage.",{},"\u002Fdocs\u002Fconfiguration\u002Fagents",{"title":390,"description":477},"docs\u002F2.configuration\u002F1.agents","e_fb04rFCWbvIdoNif8af2buouu0mgONiaYu--PThLk",{"id":484,"title":124,"body":485,"description":529,"extension":80,"meta":530,"navigation":82,"path":531,"seo":532,"stem":533,"__hash__":534},"docs\u002Fdocs\u002F2.configuration\u002F2.baselines.md",{"type":7,"value":486,"toc":524},[487,489,492,496,510,514,517,521],[10,488,124],{"id":123},[14,490,491],{},"Baselines define the trusted state for scoped paths. Strong baseline hygiene is the difference between high-signal alerts and noisy change feeds.",[18,493,495],{"id":494},"create-a-baseline-policy","Create a baseline policy",[198,497,498,501,504,507],{},[26,499,500],{},"Choose target hosts or groups.",[26,502,503],{},"Define include and exclude path patterns.",[26,505,506],{},"Run an inventory scan.",[26,508,509],{},"Review unexpected files before approval.",[18,511,513],{"id":512},"approval-workflow","Approval workflow",[14,515,516],{},"Require dual control for production baselines. Capture who approved the change and why, then keep that context attached to future drift events.",[18,518,520],{"id":519},"re-baselining","Re-baselining",[14,522,523],{},"Schedule or manually refresh baselines after planned releases. Correlate re-baseline windows with change tickets so intentional updates do not open incidents.",{"title":74,"searchDepth":75,"depth":75,"links":525},[526,527,528],{"id":494,"depth":75,"text":495},{"id":512,"depth":75,"text":513},{"id":519,"depth":75,"text":520},"Create, approve, and refresh known-good integrity baselines.",{},"\u002Fdocs\u002Fconfiguration\u002Fbaselines",{"title":124,"description":529},"docs\u002F2.configuration\u002F2.baselines","bcW016QsDJpCJMoTMgU3845PV7rSMQaoEoqcD7CiPz4",{"id":536,"title":537,"body":538,"description":595,"extension":80,"meta":596,"navigation":82,"path":597,"seo":598,"stem":599,"__hash__":600},"docs\u002Fdocs\u002F2.configuration\u002F3.alerts.md","Alerts",{"type":7,"value":539,"toc":590},[540,543,546,550,576,580,583,587],[10,541,537],{"id":542},"alerts",[14,544,545],{},"Bitfy alerts when monitored paths drift from an approved baseline. Tune severity, suppression, and destinations so responders get actionable signals.",[18,547,549],{"id":548},"severity","Severity",[23,551,552,558,564,570],{},[26,553,554,557],{},[57,555,556],{},"Critical"," — unauthorized binary or credential path changes",[26,559,560,563],{},[57,561,562],{},"High"," — unexpected config or permission drift",[26,565,566,569],{},[57,567,568],{},"Medium"," — lower-risk path activity that still needs review",[26,571,572,575],{},[57,573,574],{},"Info"," — approved or low-priority events for audit context",[18,577,579],{"id":578},"destinations","Destinations",[14,581,582],{},"Send alerts to email, webhook, SIEM, or chat ops tools. Map destinations by host group so the right team owns the response.",[18,584,586],{"id":585},"noise-reduction","Noise reduction",[14,588,589],{},"Suppress known maintenance windows, ignore volatile temp paths, and require consecutive observations for flapping files before paging.",{"title":74,"searchDepth":75,"depth":75,"links":591},[592,593,594],{"id":548,"depth":75,"text":549},{"id":578,"depth":75,"text":579},{"id":585,"depth":75,"text":586},"Route integrity events to the right responders with less noise.",{},"\u002Fdocs\u002Fconfiguration\u002Falerts",{"title":537,"description":595},"docs\u002F2.configuration\u002F3.alerts","Pzr_st7s1pMvg28hTegTiUaEa-krTb0fLNwMVpQJwd4",{"id":602,"title":603,"body":604,"description":660,"extension":80,"meta":661,"navigation":82,"path":662,"seo":663,"stem":664,"__hash__":665},"docs\u002Fdocs\u002F3.guides\u002F1.monitoring-paths.md","Monitoring paths",{"type":7,"value":605,"toc":655},[606,609,612,616,633,637,648,652],[10,607,603],{"id":608},"monitoring-paths",[14,610,611],{},"Good path scoping keeps FIM useful. Monitor what proves integrity and skip directories that change constantly by design.",[18,613,615],{"id":614},"high-value-targets","High-value targets",[23,617,618,621,624,627,630],{},[26,619,620],{},"Package-managed binaries",[26,622,623],{},"Service unit files and init configs",[26,625,626],{},"Application config roots",[26,628,629],{},"TLS certificates and private keys",[26,631,632],{},"Cron, sudoers, and auth policy files",[18,634,636],{"id":635},"paths-to-exclude-carefully","Paths to exclude carefully",[23,638,639,642,645],{},[26,640,641],{},"Logs and spool directories",[26,643,644],{},"Caches and temporary build output",[26,646,647],{},"Highly dynamic runtime state, unless you have a compliance reason",[18,649,651],{"id":650},"pattern-tips","Pattern tips",[14,653,654],{},"Prefer explicit paths over broad wildcards. When using globs, pair includes with excludes so one noisy subtree does not dominate the feed.",{"title":74,"searchDepth":75,"depth":75,"links":656},[657,658,659],{"id":614,"depth":75,"text":615},{"id":635,"depth":75,"text":636},{"id":650,"depth":75,"text":651},"Choose high-value paths and avoid noisy coverage.",{},"\u002Fdocs\u002Fguides\u002Fmonitoring-paths",{"title":603,"description":660},"docs\u002F3.guides\u002F1.monitoring-paths","TRcRsvQRtFXw2VhjzymDBBgdfc5AejNfFizodBF3aYA",{"id":667,"title":668,"body":669,"description":716,"extension":80,"meta":717,"navigation":82,"path":718,"seo":719,"stem":720,"__hash__":721},"docs\u002Fdocs\u002F3.guides\u002F2.compliance-evidence.md","Compliance evidence",{"type":7,"value":670,"toc":711},[671,674,677,681,695,699,704,708],[10,672,668],{"id":673},"compliance-evidence",[14,675,676],{},"Bitfy helps produce continuous File Integrity Monitoring evidence for PCI DSS, SOC 2, ISO 27001, HIPAA, and internal control programs.",[18,678,680],{"id":679},"what-auditors-usually-ask-for","What auditors usually ask for",[23,682,683,686,689,692],{},[26,684,685],{},"Which critical files are monitored",[26,687,688],{},"When baselines were approved",[26,690,691],{},"What unauthorized changes occurred",[26,693,694],{},"Who reviewed or remediated each event",[18,696,698],{"id":697},"exporting-reports","Exporting reports",[14,700,379,701,703],{},[57,702,382],{},", select the period, hosts, and framework mapping, then export a pack that includes inventory, change history, and approval records.",[18,705,707],{"id":706},"continuous-vs-point-in-time","Continuous vs point-in-time",[14,709,710],{},"Point-in-time checksums go stale quickly. Continuous monitoring with retained history better demonstrates ongoing control effectiveness.",{"title":74,"searchDepth":75,"depth":75,"links":712},[713,714,715],{"id":679,"depth":75,"text":680},{"id":697,"depth":75,"text":698},{"id":706,"depth":75,"text":707},"Export continuous FIM evidence for common audit frameworks.",{},"\u002Fdocs\u002Fguides\u002Fcompliance-evidence",{"title":668,"description":716},"docs\u002F3.guides\u002F2.compliance-evidence","opcBeWFjezITohcg96YEpWrZeh7w3byU4cShwJDMcNM",{"id":723,"title":724,"body":725,"description":759,"extension":80,"meta":760,"navigation":82,"path":761,"seo":762,"stem":763,"__hash__":764},"docs\u002Fdocs\u002F3.guides\u002F3.integrations.md","Integrations",{"type":7,"value":726,"toc":754},[727,730,733,737,740,744,747,751],[10,728,724],{"id":729},"integrations",[14,731,732],{},"Connect Bitfy to the tools your security and platform teams already use.",[18,734,736],{"id":735},"siem-and-webhooks","SIEM and webhooks",[14,738,739],{},"Forward integrity events as structured JSON to your SIEM or automation platform. Include host, path, hash diff summary, and severity.",[18,741,743],{"id":742},"identity","Identity",[14,745,746],{},"Use SSO for operator access and map roles to baseline approval permissions.",[18,748,750],{"id":749},"ticketing","Ticketing",[14,752,753],{},"Optionally attach change ticket IDs when approving re-baselines so investigations can separate planned work from unauthorized drift.",{"title":74,"searchDepth":75,"depth":75,"links":755},[756,757,758],{"id":735,"depth":75,"text":736},{"id":742,"depth":75,"text":743},{"id":749,"depth":75,"text":750},"Connect Bitfy to SIEM, webhooks, and identity providers.",{},"\u002Fdocs\u002Fguides\u002Fintegrations",{"title":724,"description":759},"docs\u002F3.guides\u002F3.integrations","xt4Thy3qdk0qFQRw_J7sAK4YXCaB_AAZPPNPBxDW5J4",{"id":766,"title":767,"body":768,"description":841,"extension":80,"meta":842,"navigation":82,"path":843,"seo":844,"stem":845,"__hash__":846},"docs\u002Fdocs\u002F4.reference\u002F1.cli.md","CLI",{"type":7,"value":769,"toc":837},[770,773,776,780,824,828,834],[10,771,767],{"id":772},"cli",[14,774,775],{},"Use the Bitfy CLI for install helpers, local diagnostics, and scripted baseline operations.",[18,777,779],{"id":778},"common-commands","Common commands",[221,781,783],{"className":223,"code":782,"language":225,"meta":74,"style":74},"bitfy status\nbitfy paths list\nbitfy scan --policy production-core\nbitfy doctor\n",[227,784,785,793,803,816],{"__ignoreMap":74},[230,786,787,790],{"class":232,"line":233},[230,788,789],{"class":236},"bitfy",[230,791,792],{"class":244}," status\n",[230,794,795,797,800],{"class":232,"line":75},[230,796,789],{"class":236},[230,798,799],{"class":244}," paths",[230,801,802],{"class":244}," list\n",[230,804,805,807,810,813],{"class":232,"line":158},[230,806,789],{"class":236},[230,808,809],{"class":244}," scan",[230,811,812],{"class":240}," --policy",[230,814,815],{"class":244}," production-core\n",[230,817,819,821],{"class":232,"line":818},4,[230,820,789],{"class":236},[230,822,823],{"class":244}," doctor\n",[18,825,827],{"id":826},"diagnostics","Diagnostics",[14,829,830,833],{},[227,831,832],{},"bitfy doctor"," checks service health, token validity, and outbound connectivity. Include its output when opening a support case.",[295,835,836],{},"html pre.shiki code .svObZ, html code.shiki .svObZ{--shiki-default:#B392F0}html pre.shiki code .sU2Wk, html code.shiki .sU2Wk{--shiki-default:#9ECBFF}html pre.shiki code .sDLfK, html code.shiki .sDLfK{--shiki-default:#79B8FF}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}",{"title":74,"searchDepth":75,"depth":75,"links":838},[839,840],{"id":778,"depth":75,"text":779},{"id":826,"depth":75,"text":827},"Common Bitfy CLI commands for agents and local diagnostics.",{},"\u002Fdocs\u002Freference\u002Fcli",{"title":767,"description":841},"docs\u002F4.reference\u002F1.cli","vWobPeyDexR6gijN7ac-gllDxpLxOqXWxh3k-QBMyrM",{"id":848,"title":849,"body":850,"description":906,"extension":80,"meta":907,"navigation":82,"path":908,"seo":909,"stem":910,"__hash__":911},"docs\u002Fdocs\u002F4.reference\u002F2.api.md","API",{"type":7,"value":851,"toc":902},[852,855,858,862,865,869,895],[10,853,849],{"id":854},"api",[14,856,857],{},"The Bitfy API lets you automate host inventory, policy assignment, and evidence export.",[18,859,861],{"id":860},"authentication","Authentication",[14,863,864],{},"Authenticate with a workspace API token over HTTPS. Rotate tokens regularly and scope them to least privilege.",[18,866,868],{"id":867},"core-resources","Core resources",[23,870,871,877,883,889],{},[26,872,873,876],{},[227,874,875],{},"\u002Fhosts"," — inventory and agent health",[26,878,879,882],{},[227,880,881],{},"\u002Fpolicies"," — path policies and baseline state",[26,884,885,888],{},[227,886,887],{},"\u002Fevents"," — integrity change feed",[26,890,891,894],{},[227,892,893],{},"\u002Fexports"," — compliance evidence jobs",[14,896,897,898,901],{},"See your workspace ",[57,899,900],{},"Settings → API"," for endpoint details and examples.",{"title":74,"searchDepth":75,"depth":75,"links":903},[904,905],{"id":860,"depth":75,"text":861},{"id":867,"depth":75,"text":868},"Overview of Bitfy REST API resources for automation.",{},"\u002Fdocs\u002Freference\u002Fapi",{"title":849,"description":906},"docs\u002F4.reference\u002F2.api","usiVAgZZoKIqnUHUR1nx9k2j9v1ThzI3FLFuPSyydU4",{"id":913,"title":914,"body":915,"description":954,"extension":80,"meta":955,"navigation":82,"path":956,"seo":957,"stem":958,"__hash__":959},"docs\u002Fdocs\u002F4.reference\u002F3.faq.md","FAQ",{"type":7,"value":916,"toc":948},[917,920,924,927,931,934,938,941,945],[10,918,914],{"id":919},"faq",[18,921,923],{"id":922},"how-quickly-can-i-get-started","How quickly can I get started?",[14,925,926],{},"Install an agent, define critical paths, approve a baseline, and start receiving integrity alerts within minutes.",[18,928,930],{"id":929},"does-bitfy-replace-antivirus","Does Bitfy replace antivirus?",[14,932,933],{},"No. Bitfy focuses on File Integrity Monitoring — proving what changed on critical paths — and complements endpoint protection and detection tools.",[18,935,937],{"id":936},"can-i-start-small","Can I start small?",[14,939,940],{},"Yes. Begin with a focused set of paths and expand coverage as your environment and compliance needs grow.",[18,942,944],{"id":943},"which-frameworks-does-bitfy-support","Which frameworks does Bitfy support?",[14,946,947],{},"Bitfy helps produce FIM evidence commonly requested for PCI DSS, SOC 2, ISO 27001, HIPAA, and related controls.",{"title":74,"searchDepth":75,"depth":75,"links":949},[950,951,952,953],{"id":922,"depth":75,"text":923},{"id":929,"depth":75,"text":930},{"id":936,"depth":75,"text":937},{"id":943,"depth":75,"text":944},"Answers to common Bitfy documentation questions.",{},"\u002Fdocs\u002Freference\u002Ffaq",{"title":914,"description":954},"docs\u002F4.reference\u002F3.faq","R61VCTQ-n1qX_qhFukDV6NGot_gQwzHd_8x7vmwFpyY",{"id":4,"title":5,"body":961,"description":79,"extension":80,"meta":1003,"navigation":82,"path":83,"seo":1004,"stem":85,"__hash__":86},{"type":7,"value":962,"toc":999},[963,965,967,969,983,985],[10,964,5],{"id":12},[14,966,16],{},[18,968,21],{"id":20},[23,970,971,975,979],{},[26,972,973,33],{},[29,974,32],{"href":31},[26,976,977,40],{},[29,978,39],{"href":38},[26,980,981,47],{},[29,982,46],{"href":45},[18,984,51],{"id":50},[23,986,987,991,995],{},[26,988,989,60],{},[57,990,59],{},[26,992,993,66],{},[57,994,65],{},[26,996,997,72],{},[57,998,71],{},{"title":74,"searchDepth":75,"depth":75,"links":1000},[1001,1002],{"id":20,"depth":75,"text":21},{"id":50,"depth":75,"text":51},{},{"title":5,"description":79},1785415893032]