π¦ ClawHubβ¦ BytesAgain
Auditd
by @bytesagain3
Linux Audit Framework reference. auditctl rules for file watches and syscall auditing, auditd.conf configuration, ausearch log queries, aureport summaries, a...
TERMINAL
clawhub install auditdπ About This Skill
name: "auditd" version: "1.0.0" description: "Linux Audit Framework reference. auditctl rules for file watches and syscall auditing, auditd.conf configuration, ausearch log queries, aureport summaries, audit.log format, CIS/PCI-DSS compliance rules, and audit tools." author: "BytesAgain" homepage: "https://bytesagain.com" source: "https://github.com/bytesagain/ai-skills" tags: [auditd, audit, security, linux, compliance, logging] category: "sysops"
auditd
Linux Audit Framework reference β kernel-level security auditing.
Commands
| Command | Description |
|---------|-------------|
| intro | What is auditd, architecture, quick start |
| rules | auditctl watches, syscall rules, filters |
| config | auditd.conf settings, rotation, disk actions |
| search | ausearch by key, time, user, file |
| report | aureport summaries, login, auth, file |
| logs | audit.log format, field meanings |
| compliance | CIS benchmark and PCI-DSS rules |
| tools | auditctl, audit2allow, aulast, autrace |