What control type best describes Murali's file integrity monitoring tool?

The file integrity monitoring tool used by Murali is best classified as a detective control. Detective controls are designed to identify and alert users about any unauthorized changes or anomalies within files or systems. In the context of file integrity monitoring, the tool continuously checks files against known baselines to detect any alterations, deletions, or additions that could indicate a security breach or compromise.

By regularly auditing and reporting on the file states, the tool provides visibility into potential threats, enabling administrators to respond swiftly to any irregularities. This type of control does not prevent unauthorized changes from occurring; rather, it focuses on identifying them after the fact, making it an essential part of an overall security strategy.

Preventive controls are aimed at stopping security incidents before they occur, while corrective controls focus on fixing issues after they have happened. Compensating controls provide alternative measures when primary controls are not feasible. Thus, the nature of Murali's file integrity monitoring tool aligns clearly with the functions of a detective control.