It will take a snapshot of current process data files and compares it With all the former snapshot. When the analytical process files have been edited or deleted, an warn is distributed into the administrator to analyze. An illustration of HIDS usage could be found on mission-critical devices, which are not predicted to alter their format. Other