How to find the script that changed the text file?

Question

System administration

When a user launches a site, a script is triggered on the server, which, under certain conditions, makes an entry in a text file. Please help me find this script. Is it possible to somehow determine which script made an entry / changed the file for the last time?

Answer 1

If we are talking about Linux, then there is an audit service, auditd . Allows you to monitor file access events, etc.
There are a lot of manuals on the net, for example here: https://1cloud.ru/help/security/audit-linux-c-pomo...

Answer 2

to begin with, to define the concept of "when the user launches the site" ...

Answer 3

for Windows there is a set of SysinternalsSuite programs, and there is a procmon.exe that monitors various system calls, including access to the file system.
as an option to make it read-only and see where the error occurs.