CmdID / Commands
This responds to requests from the audit utility and notifications from the kernel. tldr-pages
On several platforms
Opens CmdID with your command. It is read in your browser and sent nowhere.
This responds to requests from the audit utility and notifications from the kernel. Note: It should not be invoked manually.
Start the daemon
auditd
Start the daemon in debug mode
auditd -d
Start the daemon on-demand from launchd
auditd -l