Auditd

该 Skill 以命令形式提供 Linux Audit Framework 的参考资料，包括 auditd 架构与快速入门、auditctl 文件监视与系统调用规则、auditd.conf 配置、ausearch 日志查询、aureport 汇总、audit.log 字段说明、CIS/PCI-DSS 合规规则以及相关审计工具介绍，内容以文本形式呈现，便于查阅。

bytesagain3

热度 55.30

最近更新 2026-05-11 17:35:51

分类：安全依赖：代码执行应用场景：概念解释 / 研究 / 报告撰写

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add auditd

Metadata

name: auditd
version: 1.0.0
description: Linux Audit Framework reference. auditctl rules for file watches and syscall auditing, auditd.conf configuration, ausearch log queries, aureport summaries, audit.log format, CIS/PCI-DSS compliance rules, and audit tools.
author: BytesAgain
homepage: https://bytesagain.com
source: https://github.com/bytesagain/ai-skills
tags: ["auditd","audit","security","linux","compliance","logging"]
category: sysops

auditd

Linux Audit Framework reference — kernel-level security auditing.

Commands

Command	Description
`intro`	What is auditd, architecture, quick start
`rules`	auditctl watches, syscall rules, filters
`config`	auditd.conf settings, rotation, disk actions
`search`	ausearch by key, time, user, file
`report`	aureport summaries, login, auth, file
`logs`	audit.log format, field meanings
`compliance`	CIS benchmark and PCI-DSS rules
`tools`	auditctl, audit2allow, aulast, autrace