What is Linux Audit - Auditd - A Tool for System Administrators to Secure Their System
Auditd is the userspace component of the Linux Auditing System. Linux Audit Deamon is the long form of Auditd. Auditd is a background service and it is responsible to collect and write audit log file records to the disk. Furthermore, The Linux audit framework reliably collects information about any security-relevant (or non-security-relevant) event on a system. It can help you track actions performed on a system.
Learning about this framework is useful for System Administrators to Secure Their Systems.