monitor file activity