Documentation: Add a note on how to test/debug LAUREL

threathunters-io · Sep 20, 2021 · 5215f45 · 5215f45
1 parent 5c248cc
commit 5215f45
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -47,6 +47,10 @@ Static Linux/x86_64 binaries are built for tagged releases.
     $ sudo pkill -HUP auditd
     ```
 
+## Test, Debug
+
+For debugging and other testing purposes, _LAUREL_ can be run without specifying any configuration file. It will not change users and read events from standard input, just as it would when called from _auditd_. Log entries arewritten to `audit.log` in the current working directory.
+
 ## License
 
 GNU General Public License, version 3