Threat Detection Engineering and Incident Response with AuditD and Sentinel along how to understand and use AuditD

New article:

This is Part 1

Walk through on using AuditD logs to build threat detections along with reading and using the logs to get the bigger picture and do incident response.

[https://medium.com/@truvis.thornton/threat-detection-engineering-and-incident-response-with-auditd-and-sentinel-along-how-to-understand-bfae8ba03a43](https://medium.com/@truvis.thornton/threat-detection-engineering-and-incident-response-with-auditd-and-sentinel-along-how-to-understand-bfae8ba03a43)

article auditd blueteamsec build detection detection engineering detections engineering incident incident response logs response sentinel threat threat detection threat detection engineering understand