#Auditd

Lifailon

lazyjournal

TUI for viewing logs from journald, auditd, file system, Docker and Podman containers, Compose stacks and Kubernetes pods with support for log highlighting and several filtering modes.

threathunters-io

laurel

Transform Linux Audit logs for SIEM usage

wagga40

Zircolite

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

konstruktoid

ansible-role-hardening

Ansible role to apply a security baseline. Systemd edition.