auditd topic
ansible-role-hardening
Ansible role to apply a security baseline. Systemd edition.
auditd-attack
A Linux Auditd rule set mapped to MITRE's Attack Framework
Zircolite
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
go-libaudit
go-libaudit is a library for communicating with the Linux Audit Framework.
laurel
Transform Linux Audit logs for SIEM usage
auditd-attack
A Linux Auditd rule set mapped to MITRE's Attack Framework
AuditdPy
!!!不建议使用了,可以使用AuditBeat!!! Linux服务器命令监控辅助脚本,ElasticSearch + Logstash + Kibana + Redis + Auditd
OS-Hardening
Hardening the Linux operating system for Debian like distributions.
aushape
A library and a tool for converting audit logs to XML and JSON
ansible-role-auditbeat
Ansible role to install auditbeat for security monitoring. (Ruleset included)