Capturing file system events