Linux Kernel Process Accounting, (Wed, Aug 12th)

Read full story on SANS Internet Storm Center
Share
Linux Kernel Process Accounting, (Wed, Aug 12th)
AI disclosure

Summary

A couple of days ago, Xavier posted about Atuin to gain more insight into the command history. Atuin does a great job of better organizing what is usually handled by "bash&&#x23&#x3b;x26&#x3b;&#x23&#x3b;x5f&#x3b;history"&&#x23&#x3b;x26&#x3b;&#x23&#x3b;xc2&#x3b;&&#x23&#x3b;x26&#x3b;&#x23&#x3b;xa0&#x3b;and collecting meaningful additional data. Our reader David commented that this can also be done quite well with Linux&&#x23&#x3b;x26&#x3b;&#x23&#x3b;39&#x3b;s kernel process accounting feature, and I think he is very right. I really like Linux process accounting for a number of reasons, so here is a quick introduction.

Original reporting

Open original source

Related coverage

Read full article on SANS Internet Storm Center

Get the AFBytes Brief

Major stories, AI-assisted analysis, and what to watch next. Free, monthly, unsubscribe anytime.