Hey guys, had a question with one of the syscalls with FIM using audit.. Do we need to monitor the

read

series of syscalls if we don't wish to monitor for file_accesses.. ?