hi if monitor following syscalls :

auditctl -a always,exit -F arch=b64 -S exit,exit_group -k process_termination

then i'm monitoring process termination 🤔

@kostastsale.bsky.social