hi is there a way to log which files are accessed via ssh and by which users?

Almost all server administration is done locally so I'm trying to make sure the only files being downloaded are intended to be public downloads. It would also help to determine is there is any malicious activity going on. The only users of this server are myself and family so there is no privacy concern.

Thanks so much for your help.