Auditd, Sentinel, Threat Detection, Incident Response, Blue Team.
guide, we will walk through detecting threats using AuditD by writing rules based on the logs and how to dig deeper into the logs. This article is not meant to go deep deep into AuditD and threat detection and response but more to give you a high level view to get you going. We will have deeper