DLP Config File Monitoring Best Practices

Can anyone point me to a decent list of "critical" or "sensitive" files that should be monitored for permission or content changes in the Symantec DLP infrastructure?

e.g.  What .properties files should be monitored by something like TripWire in a Symantec DLP environment? 

Thanks in advance,

Bob.