MEDIUMVulnerability
Global

Linux Kernel Process Accounting, (Wed, Aug 12th)

·Source: SANS ISC

Updated:

Executive Summary

A couple of days ago, Xavier posted about Atuin to gain more insight into the command history. Atuin does a great job of better organizing what is usually handled by "bash&&#x23&#x3b;x26&#x3b;&#x23&#x3b;x5f&#x3b;history"&&#x23&#x3b;x26&#x3b;&#x23&#x3b;xc2&#x3b;&&#x23&#x3b;x26&#x3b;&#x23&#x3b;xa0&#x3b;and collecting meaningful additional data. Our reader David commented that this can also be done q

Analysis

A couple of days ago, Xavier posted about Atuin to gain more insight into the command history. Atuin does a great job of better organizing what is usually handled by "bash&&#x23&#x3b;x26&#x3b;&#x23&#x3b;x5f&#x3b;history"&&#x23&#x3b;x26&#x3b;&#x23&#x3b;xc2&#x3b;&&#x23&#x3b;x26&#x3b;&#x23&#x3b;xa0&#x3b;and collecting meaningful additional data. Our reader David commented that this can also be done quite well with Linux&&#x23&#x3b;x26&#x3b;&#x23&#x3b;39&#x3b;s kernel process accounting feature, and I think he is very right. I really like Linux process accounting for a number of reasons, so here is a quick introduction.
Source Attribution

Originally published by SANS ISC on Aug 12, 2026.

Related Threats