# auditd > This responds to requests from the audit utility and notifications from the kernel. > It should not be invoked manually. > More information: . - Start the daemon: `auditd` - Start the daemon in debug mode: `auditd -d` - Start the daemon on-demand from launchd: `auditd -l`