Audit what commands users ran on your server
Shell history is not an audit trail. Compare sudo logging, session recording, shell hooks and auditd execve rules, then ship the logs off the box.
#sudo
Filtering by topic #sudo · clear
Filtering by topic #sudo · clear
Shell history is not an audit trail. Compare sudo logging, session recording, shell hooks and auditd execve rules, then ship the logs off the box.