[ossec-list] Want to see name of user who changed a file

[stones2125]

I am new to OSSEC and have been trying to figure out how to do the 
following...if possible.
 
- When a file changes on a Windows server, how do I see the username of the 
person who changed it.
- How do I see the actual changes (lines of text)
 
I get the alert that shows the file checksum changed, but need more info.