{"version":"1.0","type":"rich","provider_name":"RootPwn","provider_url":"https://rootpwn.me","title":"Using Auditd and Auditd Manager for Real‑Time Linux Detection","description":"Auditd provides kernel‑level event logging for Linux, enabling precise detection of suspicious activity. Elastic’s Auditd Manager simplifies rule deployment across hosts, letting defenders focus on threat hunting rather than configuration drift. This briefing outlines how to enable Auditd, craft rul","url":"https://rootpwn.me/news/using-auditd-and-auditd-manager-for-real-time-linux-detection","thumbnail_url":"https://rootpwn.me/images/ec84afcbdd054548820875c4a50c1852.jpg","thumbnail_width":1600,"thumbnail_height":900}