https://linuxsecurity.expert/compare/tools/linux-auditing-tools/ https://linuxsecurity.expert/compare/tools/linux-auditing-to... shows a few. I've used Tiger/S

https://linuxsecurity.expert/compare/tools/linux-auditing-tools/ https://linuxsecurity.expert/compare/tools/linux-auditing-to... shows a few. I've used Tiger/Saint/Satan/COPS in the distant past. But I think they're somewhat obsoleted by modern packaging and security like apparmor and selinux, not to mention docker and similar isolators.