Is there a way in linux (possibly using Inotify?) to "log" what files are edited, live?
You can setup auditd to do this.
Look at Open Source Tripwire or the commercial Tripwire products.
LINK has a good writeup on how to do it with auditd
Sign up using Google
Sign up using Facebook
Sign up using Stack Exchange
5 years ago