Help verifying changes

For tests like "if changed timestamp" it would be nice to be able to include the old and new value in the alert message. Currently it seems to be impossible; you only get something like "timestamp was changed for /etc/passwd". Maybe by introducing new variables like $OLDSTATE and $NEWSTATE to be included in alert messages, or automatically adding that information to $DESCRIPTION that could be improved.

Comments (2)