PaulDotCom mailing list archives
Archiving History files
From: genesiswave at gmail.com (genesiswave at gmail.com)
Date: Tue, 19 Jan 2010 12:49:04 +0000
Modify his script to move the files elsewhere ------Original Message------ From: Monkey Daemon Sender: pauldotcom-bounces at mail.pauldotcom.com To: PaulDotCom Security Weekly Mailing List ReplyTo: PaulDotCom Security Weekly Mailing List Subject: [Pauldotcom] Archiving History files Sent: Jan 19, 2010 4:50 AM Hi, I've just discovered a system on which one of our darling users has decided adding a script to his .bash_logout file that removes .bash_history on logout is a clever thing to do. Is there a way to take a copy of the .bash_history file before it is deleted? This user obviously has something to hide as far as I'm concerned, so I need to archive this file to present it as evidence. Thanks in advance, MWD. _______________________________________________ Pauldotcom mailing list Pauldotcom at mail.pauldotcom.com http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com Sent via BlackBerry from T-Mobile
Current thread:
- Archiving History files Monkey Daemon (Jan 19)
- Archiving History files Robin Wood (Jan 19)
- Archiving History files Tim Krabec (Jan 19)
- Archiving History files Matt Erasmus (Jan 19)
- Archiving History files Carlos Perez (Jan 19)
- Archiving History files Robin Wood (Jan 19)
- Archiving History files Nick Baronian (Jan 19)
- Archiving History files Tim Krabec (Jan 19)
- Archiving History files Dave Ockwell-Jenner (Jan 19)
- Archiving History files Michael McGrew (Jan 19)
- <Possible follow-ups>
- Archiving History files genesiswave at gmail.com (Jan 19)