Actually, you spelled it incorrectly (there is a kernel auditor and it's totally different)Kernel auditor.
Actually, you spelled it incorrectly (there is a kernel auditor and it's totally different)
Kernel Aduitor is what you are looking for I believe.