Glossary: Logs and Data Sources for Investigations

sudo

Also written: sudoers

The Linux command for running a command as administrator, and every use is logged. 'user NOT in sudoers' meant Sam's account was refused when it tried to read /etc/shadow.