Is File System Auditor another “snapshot” based auditing solution?
• No. File System Auditor monitors file system activity in real-time to ensure each and every event that occurs is recorded for a truly auditable trail. Snapshot-based auditing solutions can only show you the sum of all the changes since the last snapshot and not each individual event that occurred.