slackhq / go-audit
go-audit is an alternative to the auditd daemon that ships with many distros
slackhq / go-audit
Lifailon / lazyjournal
TUI for viewing logs from journald, auditd, file system, Docker and Podman containers, Compose stacks and Kubernetes pods with support for log highlighting and several filtering modes.
threathunters-io / laurel
Transform Linux Audit logs for SIEM usage
wagga40 / Zircolite
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
konstruktoid / ansible-role-hardening
Ansible role to apply a security baseline. Systemd edition.