Forum Discussion

Duncan_Proffit1's avatar
Duncan_Proffit1
Icon for Nimbostratus rankNimbostratus
Jul 14, 2020

QKView logging entry - Hacking

Hi all,

If someone ran a qkview call on the command line, would there be any logging entry anywhere?

So, the question relates to a pen test activity, and the ability to remain unseen

Will the admins be able to see the command being issued?

 

Thanks

  • Yes, logs will come in audit files, under /var/log, in audit.

    It will looks like: AUDIT - pid=xxxx user=xxxx folder=/Common module=(tmos)# status=[Command OK] cmd_data=run /util qkview