cancel
Showing results for 
Search instead for 
Did you mean: 
Trevor
Starfighter Starfighter
Starfighter
  • 1,374 Views

List of all executable files - ever run

What command can I run that will provide me a list
of all the executable files, that have ever been run,
and the number of times each has been run, on my
RHEL 9.X system?

 

Trevor "Red Hat Evangelist" Chandler
Labels (3)
12 Replies
Trevor
Starfighter Starfighter
Starfighter
  • 186 Views

Hello Ad_astra,

Did you try your suggeston????

Trevor "Red Hat Evangelist" Chandler
Ad_astra
Flight Engineer Flight Engineer
Flight Engineer
  • 170 Views

Hello Trevor

Sorry, I forgot to include the arch option. So, the full command should have been:

auditctl -a exit,always -F arch=b64 -S execve

Regards

Ad_astra
Flight Engineer Flight Engineer
Flight Engineer
  • 89 Views

Hi

There's not much activity on this thread, anymore. Please can we have a solution to this question?

Thanks

Join the discussion
You must log in to join this conversation.