auditd
Named by 3 kept items in this workspace.
Search every workspace for auditd. It matches the name as written, so it can find other things that share it.
The items that name it 3
Linux audit daemon; archcanary seeds a ruleset at /etc/audit/rules.d/30-archcanary.rules when installed
Linux audit daemon used to configure rules (including filesystem watch rules) that hook system calls to detect potential threats
Kernel-implemented Linux audit framework used to write detection rules for intrusion detection, the central subject of the article
All technologies in this workspace.