Introduction
The auditd utility can be an extremely valuable tool for monitoring what's happening on your Linux server. It is designed to integrate with the kernel and monitor system calls that the system makes.
In this guide we will learn how to check if auditd is installed, install it if it is not, check to make sure the daemon is running, create a simple audit rule, and check the logs to see what our example rule detected.
[SPOILER="Notice to customers...
