on linux there are 2 ways to do FIM, inotify and u...
# general
v
on linux there are 2 ways to do FIM, inotify and using auditd, right?