AuditD vs. Falco as Host Intrusion Detection Tools
sysdig.com