According to our change management policy, all changes to production servers should be supported by supporting documents. I would like to perform a test by looking for files that have been created/changed recently and comparing with supporting documents. What is the best way of doing this on Windows and Unix servers? Can I use the create date or modified date? fyi there is no auditing of changes to files and system objects.