File / Directory Change Watch

From HyperSecurity Wiki
Jump to: navigation, search
#!/bin/bash

# Set the directory to be monitored
dir="/path/to/dir"

# Start the inotifywait command to monitor the directory
inotifywait -m -e access $dir |
while read path action file; do

  # Print a message and the details of the event
  echo "A process has accessed the directory: $path $action $file"
done