Skip to content
Linux Log Parser

Posts tagged: #execve

← Back to all posts
auditd EXECVE Forensics: auid, ses and Hex Arguments
Reconstruct command lines from Linux audit.log: grouping records by event, EXECVE argument reassembly, hex-encoded arguments, auid and ses across sudo.
linux-forensicsauditdexecvecommand-line