I've got FIM set up to monitor a 'sensitive' folder. I'm getting events on file creates, deletes, and writes. However, when I create a sub-folder underneath the monitored folder, I don't get any events at all. Since I am monitoring this folder recursively for all files and sub-directories, I would expect to see a create or write event even when a sub-folder is created. Is anyone experiencing this same FIM behavior? I've attached a screenshot of the conditions for this folder. if you have any ideas, I'd like to hear them.
↧