auditctl

The auditctl command is a tool used to configure the Linux Audit System at runtime. It allows administrators to add, delete, and list audit rules.

https://man7.org/linux/man-pages/man8/auditctl.8.html

---