Threats · InfosecFeed Brief

Linux Shell Forensic: Let?s Dive Into Atuin!, (Fri, Aug 7th)

Threats

What you need to know

UNIX systems (including Linux) are well-known to record a lot of activities in many different locations. But there is one domain where they definitely lack of "modern" logging: shells. Most shells provide an historization of the typed commands through a flat file in the $HOME directory (ex: $HOME/.bash_history). They suffer of multiple problems:

Source transparency

This is an InfosecFeed curated brief based on reporting from SANS Internet Storm Center. InfosecFeed does not claim ownership of the original reporting.

Read the original report at SANS Internet Storm Center ↗