You can turn on Change Tracking in the Configuration document, on the Notifications and Logging tab:


When either (or both) of the Change Tracking options is enabled, every time the SecurityInsider scan agent runs, it will record all the changes that were found since the last scan in the following way:


The XML files and change documents can be found in views listed in the Information section, below the Processing Logs view: