THREAT OPS › Threat News › Linux Kernel Process Accounting, (Wed, Aug 12th)
Linux Kernel Process Accounting, (Wed, Aug 12th)
A couple of days ago, Xavier posted about Atuin to gain more insight into the command history. Atuin does a great job of better organizing what is usually handled by "bash_history" and collecting meaningful additional data. Our reader David commented that this can also be done quite well with Linux's kernel process accounting feature, and I think he is very right. I really like Linu
Original source: https://isc.sans.edu/diary/rss/33240