commandhistory

$ target-query <path/to/target> -f commandhistory
Details

Module

dissect.target.plugins.os.unix.history.CommandHistoryPlugin

Output

records

Module documentation

UNIX command history plugin.

Function documentation

Return shell history for all UNIX users.

When using a shell, history of the used commands can be kept on the system. These are usually written to a hidden file named .$SHELL_history and may expose commands that were used by an adversary.

Details

Module

dissect.target.plugins.os.unix.bsd.citrix.history.CitrixCommandHistoryPlugin

Output

records

Module documentation

Citrix command history plugin.

Function documentation

Return shell history for all Citrix users.

Some entries are returned in reverse chronological order and can contain negative command order integers due to the way Citrix stores bash history commands.