Mar 29, 2014 · 8:43 PM UTC
3
19
10
@hal_pomeranz nice work! Also, with 2.,3 by default if you don't give a bash history address it will bruteforce all "bash" processes
1
@attrc Thanks! I'll play around with the 2.3 linux_bash some more. Questions may follow... ;-)
1
@hal_pomeranz also about bash, some debian systems are now shipping with /bin/dash default which requires new research to get cmd history
RT @hal_pomeranz: Pssst... stuff happening over here... #DFIR #Volatility #Linux github.com/halpomeranz/lmg