Auditd - Use auditd for comprehensive system auditing.

 Use auditd for comprehensive system auditing.

sudo apt install auditd audispd-plugins

sudo systemctl enable auditd

sudo systemctl start auditd

sudo nano /etc/audit/audit.rules
-w /etc/passwd -p wa -k passwd_changes
sudo systemctl restart auditd

#systemmonitoring
#monitor
#auditd

Comments

Popular posts from this blog

How To Customize Linux Bootloaders ... #customization #linuxcustomization #kalilinuxcustomization

"Colorful Command Line: How to Add lolcat to Your Linux Commands"