Audit Data Visualization

Over the past year, a lot of work has went into creating a native audit system for the Linux 2.6 kernel. It has the ability to collect lots of different kinds of information about the system in a fairly non-intrusive manner. It can intercept syscalls and record nearly anything about the syscall, watch files for access, collected events from MAC (Mandatory Access Control) mechanisms like SE Linux,