if there is no change, FIM only supported on Linux. (but maybe you can use this extention for osquery - https://polylogyx.com/) except the extention, you may prefer configuring windows auditing for this purpose. With Windows file auditing, windows generates write,delete,read etc file events on interested event channels (for example Security channel - you can see generated events using event viewer after configuring windows file auditing) @gsat