Linux/Unix Shell History Tampering

Danny Y@zendannyy

•updated Feb 17, 2026•0•38

Detects multiple methods used by adversaries to clear or disable Linux shell command history (bash, zsh) in order to cover tracks and evade investigation.