kevinkn / auditd_policy

bro policy for auditd logging and analysis

auditd_policy

The auditd_policy repo is the bro side of the larger auditd project designed to analyze and store logging info for multiple systems.

For additional details on each of the individual policy files, please see the related wiki page.