who gained root access on my Linux system – an analysis of sudo logs

who gained root access on my Linux system – CLI 53 – an analysis of sudo logs

♥️ SUBSCRIBE for more videos: https://www.youtube.com/bluemonkey4n6?sub_confirmation=1

Difficulty Level: Beginner
Prerequisites: basic understanding of linux system usage
basic understanding of sudo usage (see this tutorial: https://youtu.be/9sGOTNtfQzQ)

In this video we are going to be looking at what traces are left behind when the sudo command is run or attempted to be run on a Linux machine.

Video timeline
00:00 intro
01:00 unauthorized user
01:44 sudo log file location
02:26 how to read sudo logs
05:51 reading sudo logs as admin user
08:52 sudo logging of unauthorized users

⭕️ther videos which the bluemonkey4n6 AI engine believes you would enjoy:
Linux process control commands: https://youtu.be/aswGKXHHcjw
The Linux /proc directory for running processes: https://youtu.be/ia385qaabQw

🔨 Gear I dig:
Wyze Cam v4.0: https://amzn.to/3wZvBLF
Wyze Cam v3.0: https://amzn.to/48HmOMB
GL-iNet Mango portable travel router: https://amzn.to/3Fa5iCY
Enegon Portable charger: https://amzn.to/42Rn47y
ThinkTank Cable Management 10 v2.0: https://amzn.to/45BwN4v

DISCLAIMER: Links in this video description might be affiliate links. If you purchase a product or service using one of these links, I may receive a small commission at no additional cost to you. Thank you!

Icons made by freepik from @flaticon http://www.flaticon.com/authors/freepik

Icons made by Smashicons from @flaticon http://www.flaticon.com/authors/smashicons

Music by Lensko: Let’s Go

Hacker Stock Videos by Vecteezy: https://www.vecteezy.com/free-videos/hacker

#DFIR #linux #sudo