From version 3.4.0, Wazuh incorporates a new functionality which obtains the who-data information from monitored files.
This information contains the user who made the changes on the monitored files and also the program name or process used to carry them out.
Contents
.. toctree::
:maxdepth: 1
who-linux
who-windows
who-windows-policies