Linux auditd Kernel Auditing Rule Set Validator
Audits Linux auditd rule configurations for mandatory security event tracking (privileged command execution, file tampering).
Notice: engineering verification utility. Use test or de-identified data and verify results independently before relying on them.
How it works
Standard: CIS Linux Benchmark / NSA Linux Hardening Guide
Formula: Verify auditctl watch rules (-w) and system call interception (-a exit,always)
Checks: auditd rule syntax verification
Calculated locally in browser memory; nothing leaves your browser.
Deterministic local-first client-side execution. Provided as-is without warranty.