How to tell which files have been copied or modified

[stagnitto]

Greetings all:

I would like to know if there is a way to determine which files have been copied and/or modfied or deleted. We suspect a former co-worker has copied certain files from the Linux file server before he left the company. Is there a way to determine this?

[techieMoe]

You should be able to see the last modification time for a file with

ls -al

I'm not sure if there's a way to tell which user modified it last, but it's possible.