Auditd, Sentinel, Threat Detection, Incident Response, Blue Team.
ProcessID == "#####" NOTE: The following is a side example of what happens when you log more details or everything with -a exit,always -F arch=b64 -S all As you can see when we log more, we can see more such as what a script executes: We can see our Syscalls do cat /etc/passwd and pkill. If we