auditd

Backlinks from these awesome lists:

• decalage2/awesome-security-hardening
• 0x4d31/awesome-threat-detection
• infosecb/awesome-detection-engineering