New posts in Auditd

What is the syslog facility for auditd logs?

How to tell if auditd has suspended logging?

What is the correct way to generate /etc/audit/audit.rules on Centos7?

Files disappearing on linux server

Reducing the verbosity of auditd, my minimal rules catch stuff they should not (apparmor)

auditd execve arguments that looks like encoded data