LogError writes “Sebek is a piece of code that lives entirely in kernel space and records either some or all data accessed by users on the system. This paper is a detailed discussion of Sebek, how it works and its value.”
Link: net-security.org
Category:
- Linux
