A bit like the Plugins/Themes guard, where Shield tracks changes to their PHP files, a further option is to build full file-system monitoring service to track all new files and changes across the entire site.