Can php7.3 or apache2.4 log every file change/creation, to discover website vulnerabilities easily?

Question

In a linux server with apache2.4 and php7.3 with many websites, I have the problem that one (or more) php script creates serveral files like "12345678.php" within bad