go-audit is an alternative to the auditd daemon that ships with many distros [featuring ben quirks and UX improvements] - View it on GitHub