Auditing who-dataΒΆ

New in version 3.4.0.

From version 3.4.0, Wazuh incorporates a new functionality which obtains the who-data information from monitored files.

This information contains the user who made the changes on the monitored files and also the program name or process used to carry them out.