Details
auditd is the userspace component to the Linux Auditing System. It’s responsible for writing audit records to the disk
Rationale:
The capturing of system events provides system administrators with information to allow them to determine if unauthorized access to their system is occurring.
Solution
Run the following command to Install auditd
# apt install auditd audispd-plugins
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Audit and Accountability.This control applies to the following type of system Unix.