toolsauditd

auditd

"Linux auditing daemon for recording security-relevant system events, system calls, and policy-defined activity, with tools for searching and reporting on audit logs."

advanced-usersreal-timeclimonitoring