Announcements
2022 VeloCon
Documentation
Velociraptor Overview
History
Support Policy
Deployment
Self-Signed SSL
Cloud Deployment
Multi-Frontend
Deploying Clients
Users and Roles
Performance
Troubleshooting
The Admin GUI
Inspecting clients
The VFS
Artifacts
Hunting
VQL Fundamentals
Notebooks
Artifacts
Event Queries
Forensic Analysis
Searching Filenames
Searching Content
NTFS Analysis
Binary parsing
Evidence Of Execution
Event Logs
Volatile State
Triage and acquisition
Client Monitoring
Extending VQL
Server Automation
Server API
Server Monitoring
VQL Reference
Basic VQL
Linux Specific
Windows Specific
Parsers
Server Side
Client Side
Event Plugins
Experimental
Misc
Training
Blog
Presentations
Auscert 2021
DFRWS US 2021 Workshop
OSDFC 2021
BTV 2021
Linux Conf Au 2022
Auscert 2022
Artifact Exchange
Knowledge Base
Search
Github
Discord
Mailing List
RSS
parse_auditd
parse_auditd
Description
parse_auditd
Plugin
Arg
Description
Type
filename
A list of log files to parse.
list of string (required)
accessor
The accessor to use.
string
buffer_size
Maximum size of line buffer.
int
Description
Parse log files generated by auditd.
Please enable JavaScript to view the
comments powered by Disqus.
comments powered by
Disqus