Skip to content

Glossary: Logs and Data Sources for Investigations

ausearch

The Linux command that searches audit records, for example by key with -k custdata. The -i option turns numbers into readable names.

Where the book teaches it

Related terms

auditdauditctl