When using application and device control to monitor a file for any file writes - if one right clicks the file and opens the properties dialog box SEP erroneously records an event indicating that the file was written to - even though nothing changes.
SEP should only log a file write when a file is written to.
I honestly thing this is more of a bug because it's not behaving as expected.
See case #09021106 for more information