An administrator wants to be warned about suspicious activity, such as file deletion, for the...

To be warned about suspicious activity, such as file deletion, for the company's Files installation, the administrator can define a new anomaly rule in File Analytics. Anomaly rules alert when specific types of activity occur, such as processes that indicate ransomware or data manipulation. By creating a new anomaly rule, the administrator can specify the activity they want to monitor and alert on, such as when a file is deleted in the company's Files installation.

https://next.nutanix.com/community-blog-154/file-auditing-and-analytics-for-your-nutanix-files-enterprise-cloud-31950