kauditd

audit: kauditd hold queue overflow

systemctl is-enabled auditd.service

Audit: acct, atop, tripwire, AIDE, auditd, debsums, AWS Cloudtrail, logwatch, logcheck, Google Santa, Coguard