I'm evaluating a tool and I need to identify all files (including system config files) added, changed or removed by this application (it is installed using pip).
After installing on a external host, I'll track all the changes to bring the application to a different with the help of those tracked changes.
Note that I'm not looking for application or install logs, I'm looking for the changes made by this install and its application.
This can also be an useful scenario to audit the impact of any application being evaluated.
One possible solution is using fswatch (https://www.ostechnix.com/monitor-file-changes-using-fswatch-linux/), but it is not able to monitor the root directory.
A good decade ago, there was a tool for Windows called Norton CleanSweep (https://en.wikipedia.org/wiki/Norton_CleanSweep), that monitored a install app and tracked all files and registry entries added by this install to allow full deletion of this tracked install. That's exactly what I'm looking for, but for a unix box (Debian distros based would be the perfect one)
Any ideas on what can be used to track all changes in a unix host?