Auditd Configuration Best Practices vs Binary Defense Threat Hunting (2026)