Notifications
Clear all
Topic starter
22/09/2018 9:22 am
platform is redhat linux 6.1, I find new user tianbu created two weeks ago, I suspect the linux server is compromised by this user with root right, how can we track any priviledge escalation log (time, logon ip)by this user? any history can be tracked?