1
saas
5y

Is there a way to see what all files were accessed or paths traversed ?

Comments
  • 0
    I have checked the logs provided at the hosting cpanel dashboard. I see no logins ☹️.
  • 4
    Sans having configured auditd or similar, your options are limited. Maybe they were dumb enough to not escape bash history?
  • 0
    I thought so but nothing in bash history either
  • 0
  • 1
    @mentions
    Anyone smart would delete it, or just put whitespace at the beginning of the command
  • 1
    Maybe query the os itself @linuxxx. Could you please suggest something :( ?
  • 2
    @mentions Find command and sort by date? Also SSH logs :)
  • 2
    @linuxxx ah yes! 🤦. Thanks man. I'll check those. You stay safe.
Add Comment