Loading...

SOCpedia Blog

Monitoring of Linux boot, reboot, and shutdown
Sep 16, 2026 AI

Monitoring of Linux boot, reboot, and shutdown

1. Problem statement. As part of fulfilling regulatory requirements, it was necessary to prepare an evidentiary base for auditors regarding monitoring of Linux operating system bo…

Numeric values of Audit event types
Sep 14, 2026 AI

Numeric values of Audit event types

Audit message types have numeric identifiers grouped by functional ranges. These values are important not only for determining a record's purpose, but also for understanding which…

Basic description and architecture of auditd
Sep 10, 2026 AI

Basic description and architecture of auditd

1. Architecture overview. Linux Audit is an audit subsystem built into the Linux kernel, designed to record events related to the security of the operating system. It allows track…

Show

SOCpedia - knowledge platform

This section contains materials on SOC and Blue Team practices: articles, news, books, and translations.