### What would you like to be added? Testing on my demo environment which sets up Auditd the new detect.yaml does not seem to find this. /kind enhancement ### Why is this needed? We can cover auditd out of the box.