has anyone else noticed that FIM (FSevents) on macOS does not work with hidden directories? e.g. .ssh. Is that by design? It looks like FIM with EndpointSecurity does track it

IIRC there may have been an issue/PR about this recently?

Hey Brandon, I don't know about issue (checked and couldn't find) if I am not mistaken, it is a known feature to exclude hidden directories 😞