Skip to content

Glossary: Logs and Data Sources for Investigations

auditd

Also written: Linux audit system

The Linux audit system. It records the events its rules ask for, such as each read of a sensitive file.

Where the book teaches it

Related terms

Audit logauditctlausearch