https://www.24x7serversupport.com/blog/track-file-changes-using-auditd/