https://www.24x7serversecurity.com/blog/track-file-changes-using-auditd/