Timeline for Is there a way to tell which file (script, specifically) executed a command?
Current License: CC BY-SA 3.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| S Jan 18, 2014 at 6:39 | history | suggested | Timo | CC BY-SA 3.0 |
removed thanks
|
| Jan 18, 2014 at 6:33 | review | Suggested edits | |||
| S Jan 18, 2014 at 6:39 | |||||
| May 27, 2011 at 10:08 | history | edited | Gilles 'SO- stop being evil' |
edited tags
|
|
| May 27, 2011 at 10:08 | comment | added | Gilles 'SO- stop being evil' |
In what type of scenario: is the command running at the time of your investigation? Do you want to investigate all executions of the command or just some? Can you set up a monitoring method beforehand or is this strictly forensic? Can you control all the ways the command is run? Can you modify the command's executable? Browsing process+monitoring might provide inspiration.
|
|
| May 27, 2011 at 9:13 | history | tweeted | twitter.com/#!/StackUnix/status/74040441904959488 | ||
| May 27, 2011 at 5:16 | answer | added | Mat | timeline score: 4 | |
| May 27, 2011 at 4:07 | history | asked | zero cola | CC BY-SA 3.0 |