Blog

Can log data be changed?    

Once an attacker has compromised a Linux system, he/she may ‘cover their tracks’ to reduce the chances of detection.  What command might the attacker use in this regards?

All of the following are log files in Kali (Debian) Linux except:

What command likely is used that is covered up?

Fill in the blank…journalctl queries the _________ log files created by journald.

What will the output look like?

What is vmlinuz?

What command produced the following output?  

All of the following are regular tasks a Linux administrator will do except:

What goes in the blanks?    (note:  it’s the same word in both blanks)   A ___________________ is a program with a unique purpose.  They are utility programs that run silently in the background to monitor and take care of certain subsystems to ensure that the operating system runs properly.  A printer ____________________ monitors and takes care of printing services, for example.