Linux - Auditctl

To check audit buffer state :

auditctl -s

The architecture of Linux audit : see Linux C2-Style Audit Capability (2001-08-04)

Comments

Popular posts from this blog

Long running process in Linux using PHP

Reverse Engineering Reptile Kernel module to Extract Authentication code

SAP System Copy Lessons Learned