File Access Tracking collects all successful file access activity that is logged by the Operating System when auditing on a directory and/or file is enabled. You can utilize this feature to either capture all file access activity or only capture file access activity on security-sensitive files and folders. File Access Tracking can report on.
Like most features, file access tracking can be customized to only capture specific file access (e.g. write access) and you include/exclude files based on patterns like extensions.
Additionally, file access tracking can include the following information about a file change:
File Access Tracking requires that auditing is enabled on all folders that are being monitored with the file access tracking feature.