Auditd - Use auditd for comprehensive system auditing.

 Use auditd for comprehensive system auditing.

sudo apt install auditd audispd-plugins

sudo systemctl enable auditd

sudo systemctl start auditd

sudo nano /etc/audit/audit.rules
-w /etc/passwd -p wa -k passwd_changes
sudo systemctl restart auditd

#systemmonitoring
#monitor
#auditd

Comments

Post a Comment

Popular posts from this blog

Linux Commands part - 2

Image
$ file images.png output- Dimensions file type 8 bit color map $less file.txt this command shows overwhelm text in one screen at a time. $sudo apt install imagemagick $identify images.png Gives the properties of the images etc... $mkdir -p /home/Desktop/maverick/Documents/MyDocuments/ This command gonna create sub-directory. $ mkdir -p Soumya/Documents/Kali.pdf/ | touch mk.txt Find $ $ find /home -name puppies.jpg $ $ find /home -type d -name MyFolder $help $man $whatis ls Oneliner help this command will explain the command in one line. 18. alias Sometimes typing commands can get really repetitive, or if you need to type a long command many times, it’s best to have an alias you can use for that. To create an alias for a command you simply specify an alias name and set it to the command. $ alias foobar='ls -la' Now instead of typing ls -la, you can type foobar and it will execute that command, pretty neat stuff. Keep in mind that this command won't save your alias after rebo
Read more