I have yet to find a detailed OAS log file listing all that has been scanned; three options that I resorted too:
1) "On Access Scan Statistics" <> no log file and scan location is truncated
2) Use the EICAR anti-malware test file to confirm folders are being scanned <> How to use the EICAR anti-malware test file with McAfee products Technical Articles ID: KB59742 Last Modified: 5/12/2016 McAfee Corporate KB - How to use the EICAR anti-malware test file with McAfee products KB59742
3) McAfee Profiler <> captures top processes and files that are accessed by the VirusScan Enterprise (VSE) On-Access Scanner (OAS) McAfee Profiler
I'm not using VSE. Procmon.exe from sysinternals on mcshield.exe seems to do the trick.
Cool, does it show what's actually being scanned?
Far as i can tell yes.
When i open/close something, mcshield.exe CPU spikes and procmon shows REG & File activity from mcshield on the processes I activated.
Maybe someone can confirm the accuracy.