Why does Qualys FIM use AuditD and not Linux kernel?

Type topic text here.