Skip to content
Linux Log Parser

Posts tagged: #wtmpdb

← Back to all posts
wtmp, btmp and lastlog Forensics, wtmpdb and lastlog2
Linux login records in an investigation: struct utmp on x86_64 and aarch64, btmp failed logins, lastlog slots, wtmpdb and lastlog2 SQLite files, tampering.
linux-forensicswtmpbtmplastlog