Parse auditd logs to detect file access violations, privilege escalation, suspicious syscalls, and unauthorized process execution.
