File monitoring changes

[Monah Baki]

Morning all,

When I receive a Level 7 integrity checksum changed email, is there a way to increase the output of what changed. We had a compromise yesterday on a index.php file where OSSEC did  detect the changes, but emailed me a few lines of the changes, but when we looked into the file itself it was a couple of pages of diff.

Thanks

Monah