Capture files changed during SSH sessions