What it does
Plugins and themes are common places for unwanted changes because they run important site behaviour.
Shield watches for changes so you can investigate sooner, before a small file edit becomes a larger security issue.
Setup
Enable monitoring for the plugin and theme areas you care about, then review alerts after updates or maintenance.