Sentinel, Threat Detection, Auditd, Information Security, Blue Team.
to test your config, you can always run the binary with the config manually to check for errors: /usr/local/sbin/laurel --config /etc/laurel/config.toml Add to /etc/audit/plugins.d/laurel.conf (AuditD Version 3) Add to /etc/audisp/plugins.d/laurel.conf (AuditD Version 2) Use dpkg — list auditd to