Right now there is no clean way to monitor the security on Unraid OS, I think is something critical since many people is publishing dockers to internet.   It's not compatible with auditd or wazuh or elastic agents or similar solutions.   Right now even easy projects like crowdsec are compatible with auditd so people can easily implement some monitoring or going more advance with wazuh or other tools make use of the sigma rules, wazuh, security onion, Qradar Community edition,