/var/log/auth.log
ls var log
journald
journalctl
journalctl -u ssh --since -1h
less var/log/auth.log
uniq -c
last
lastb
bashhistory
cat etc/passwd
cat viminfo
cat lesshst
ls -la /home/gtriderxc
(.cache .config
auditd
ausearch -ua gtriderxc -i | CCZE -A | less -R
-ausearch -ts this-week
dmesg apparmor denied
cat etc/shadow
id
etc/sudoers
less v
ps -ef
etc/sudoers.d
-find / perm /u+s,g+s
chmod u+s
setfacl -m u:user:w etc/katalog
+ w LS
w
who
loginctl
ps aux
ps -ef
pstree
pgrep -a
ls /proc
ls -la fd
lsof -n
CTRL+L
lsof -n grep deleted
env
which ps
dpkg verify
df - h
/dev/shm /ymp //run/ var/run /var/tmp
lsattr
chattr -i nazwa pliku
stat
mount
cat/crontab user
ls var/spool/usere
netstas ss
tcpdump
ss-t
ss -tn
ss-tnl
ss-tnlp
lsof -n
lsof -ni
nload
iptraf-ng
ip - s link
chrootkit/rkhunter/unhide/aide
auditd
auditctl plik -p rwxa
inotify-tools
inotyfywait -m plik
systsat sar
ls var log
journald
journalctl
journalctl -u ssh --since -1h
less var/log/auth.log
uniq -c
last
lastb
bashhistory
cat etc/passwd
cat viminfo
cat lesshst
ls -la /home/gtriderxc
(.cache .config
auditd
ausearch -ua gtriderxc -i | CCZE -A | less -R
-ausearch -ts this-week
dmesg apparmor denied
cat etc/shadow
id
etc/sudoers
less v
ps -ef
etc/sudoers.d
-find / perm /u+s,g+s
chmod u+s
setfacl -m u:user:w etc/katalog
+ w LS
w
who
loginctl
ps aux
ps -ef
pstree
pgrep -a
ls /proc
ls -la fd
lsof -n
CTRL+L
lsof -n grep deleted
env
which ps
dpkg verify
df - h
/dev/shm /ymp //run/ var/run /var/tmp
lsattr
chattr -i nazwa pliku
stat
mount
cat/crontab user
ls var/spool/usere
netstas ss
tcpdump
ss-t
ss -tn
ss-tnl
ss-tnlp
lsof -n
lsof -ni
nload
iptraf-ng
ip - s link
chrootkit/rkhunter/unhide/aide
auditd
auditctl plik -p rwxa
inotify-tools
inotyfywait -m plik
systsat sar