how can check real time scan events ?
open SEP client GUI
SEP under Antivirus and Antispyware Protection >> Options >> View File System Auto-Protect Statistics. enabling vpdebug will help in this case.
the log will show waht files have been scanned .
check for entries
Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619
Use process monitor from MS:
Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.