New posts in auditd

Sending auditd records to my audispd plugin

linux audit auditd

How to find out PID of the process sending packets (generating network traffic)?

linux networking auditd

Is there a way to know why a service is restarted and who did it?

ubuntu ubuntu-14.04 clamav auditd

Reducing the verbosity of auditd, my minimal rules catch stuff they should not (apparmor)

ubuntu logging auditd apparmor

What does auditd log by default (i.e. when no rules are defined?)

security debian debian-jessie auditd

File audit in Linux: how to watch directory tree for deletions?

linux centos audit auditd

Files disappearing on linux server

linux files auditd