auditd

This responds to requests from the audit utility and notifications from the kernel. It should not be invoked manually. More information: https://manned.org/auditd.

• Start the daemon:

auditd

• Start the daemon in debug mode:

auditd -d

• Start the daemon on-demand from launchd:

auditd -l