Post #3492873

Auditd configuration that: Is designed to load out of the box on *most* Linux systems. Keeps the detection logic in Sigma rules, stays easy to read and adapt Coverage: Self Auditing, Noise Filters Scheduled tasks Library Paths, shell profiles, SSH, systems, and MAC Policy Changes… And more!! https://discourse.ifin.network/t/considerations-about-what-to-log/628?u=rye #logging #systems #linux