Setting up AuditD on Linux and sending the logs to Azure Sentinel and parsing them for threat hunting and detection building

If anyone is looking to get started at threat hunting and detection building in Linux with AuditD in a SIEM here are some get you started quickly articles.

https://medium.com/@truvis.thornton/how-to-install-and-setup-azure-arc-ama-azure-monitor-agent-and-dcr-data-collection-rules-for-47381ee9d312

https://medium.com/@truvis.thornton/how-to-parsing-auditd-syslog-in-microsoft-sentinel-with-a-function-and-combining-the-events-by-eve-a65f418cfef1