====== Auditing ====== **Auditd **or audit daemon, is a userspace component to the Linux Auditing System. It’s responsible for writing audit records to the disk. Use **man auditd** to see more detail about auditd; or **man ausearch** to see more detail about ausearch tool. ---- [[Ubuntu:Auditing:Audit a directory|Audit a directory]] [[Ubuntu:Auditing:Audit a file|Audit a file]] [[Ubuntu:Auditing:Example|Example]] [[Ubuntu:Auditing:Install auditd|Install auditd]] [[Ubuntu:Auditing:List auditd rules|List auditd rules]] [[Ubuntu:Auditing:Start auditd|Start auditd]] [[Ubuntu:Auditing:View the audit log|View the audit log]] [[Ubuntu:Auditing:View audit reports|View audit reports]]