What program to install on the server to track changes in files?

Question

linux

Good afternoon everyone. The server has CentOS 7 installed. Several users. Periodically, changes to files occur that affect the operation of the server/website. Users are not recognized, once the virus settled (like everything was cleaned up). I would like to track which user (perhaps even the system user) modified the file. Recommend a program for tracking file changes (required to display the user who made the changes).

Answer 1

etckeeper to version changes in the /etc
git directory for sites...

Answer 2

put an incremental backup.
in increments and will be the desired.
and backup will be - do not care about viruses.

Answer 3

as for me you are tormented but try
https://www.tecmint.com/generate-verify-check-file...