nicole pauls, you suggest using Windows File Auditing, does LEM not have something similar for Linux? Is this a specific connector or just a set of rules used to watch for specific events... or a combination of the two. Basically I am interested in how I would configure this so I can test it out.
Thanks in advance for helping out with this.