I've worked at places that use the below or a flavour of to monitor specific files for modification etc.
https://www.newnettechnologies.com/nnt-file-integrity-monito...
Re:How often should I rotate my SSH keys?
by staticassertion on Friday February 26, 2021 @07:45AM
(#26274194)
File monitoring is particularly slow, though not for any fundamental reason. But you can still monitor lots of files efficiently by just limiting which files you look for, which lots of companies do.
No endpoint security system I'm aware of being used outside of core banking/telco/government system logs all file accesses. It would crash instantly for one single build of your average NodeJS application.