HOT NEWS
Laurel : Transform Linux Audit Logs For SIEM Usage
.png "Laurel : Transform Linux Audit Logs For SIEM Usage")
LAUREL is an event post-processing plugin for auditd(8) to improve its usability in modern security monitoring setups.
Why?
TLDR: Instead of audit events that look like this…
type=EXECVE msg=audit(1626611363.720:348501):...