auditd

Build an AI-Powered Linux Security Monitor

Collect Linux auditd and journald events, filter them with deterministic Falco-style rules, then use a local LLM for plain-English triage. No telemetry…