Honest question from an interested party: have you actually had it alert you about someone else changing the files?
I've been in the previous boat: of having it running on a system I've inherited, and given up because it seemed too much hassle.
I've been in the previous boat: of having it running on a system I've inherited, and given up because it seemed too much hassle.
Those three timely notifications of real breaches have made 20+ years worth of occasional false positives 100% worth it.