• Our security folks use Tripwire for auditing like this.