CODE EXAMPLE FOR SHELL

ubuntu auditd show process activity by rules

# We can look at information on all system calls as an example:
sudo aureport -s