Craig H. Rowland
CraigHRowland
Let's talk Linux log tampering. If these commands show you anything, it's time to take a look: #DFIRutmpdump /var/run/utmp | grep -E "(^\[0\]|^\[.[0-9]+\])"utmpdump /var/log/wtmp | grep -E "(^\[0\]|^\[.[0-9]+\
Read more
By continuing to use the site, you are consenting to the use of cookies as explained in our Cookie Policy to improve your experience.