Does anyone know if the Netwrix File Servers modifies or creates index files on the scanned servers in C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles?
I've noticed since I setup the Netwrix Change Notifier for Files Servers, this folder location is creating about 5GB of data on a daily basis on the servers being scanned.
I am not familiar with this behavior. One thing you could do is use a tool like Process Monitor by Sysinternals and filter for all processes touching the CiFiles directory and you would know what process it is.