Skip to content

Glossary: Logs and Data Sources for Investigations

PROCTITLE

The audit record that holds the full command that was run, such as cp /srv/shop/exports/customers.csv /tmp/.c.

Where the book teaches it

Related terms

SYSCALLAudit log