What is the directory for tampered file in WA(Linux)?

What is the directory for tampered file in WA(Linux)?

Customer Environment:
OS for WebALARM Agent (WAA): Linux

Question(s) & Answer(s):

Q1: What is the directory for tampered file in WA(Linux)?
A: "/usr/local/wa4/wa.err/"

Q2: Does the tampered file format would be changed once it is copied into the /wa.err directory?
A: NO.

More information:
N/A