Linux auditd Detection Ruleset
Linux auditd ruleset that produces telemetry required for threat detection use cases.
- from
- Detection Engineering
- added
- 2026-10-10
- likes
- 0
similar
-
-
-
Elastic Detection Rules github.com
Elastic's detection rules written natively for the Elastic SIEM. Can easily be converted for use by other SIEMs using Uncoder.
-
-
-
Detection Engineering › Logging, Monitoring & Data Sources: “Linux auditd ruleset that produces telemetry required for threat detection use cases.”