Due to the Debian 13 update, systemctl auditd shows that auditd failed to start. This is due to certain rules that are no longer valid in the latest debian version.

These auditd logs are sent from the sensor to Malcolm and populate the "Malcolm Sensor Audit Logs" dashboard.

The once the rules are fixed, the service should start correctly