any thoughts around matching FIM events to PIDs? i...
# general
c
any thoughts around matching FIM events to PIDs? i.e., would be nice to say “puppet changed /etc/passwd” or “vi changed /etc/passwd”