cancel
Showing results for 
Search instead for 
Did you mean: 
Trevor
Starfighter Starfighter
Starfighter
  • 1,549 Views

List of all executable files - ever run

What command can I run that will provide me a list
of all the executable files, that have ever been run,
and the number of times each has been run, on my
RHEL 9.X system?

 

Trevor "Red Hat Evangelist" Chandler
Labels (3)
13 Replies
Trevor
Starfighter Starfighter
Starfighter
  • 274 Views

Hello Ad_astra,

Did you try your suggeston????

Trevor "Red Hat Evangelist" Chandler
Ad_astra
Flight Engineer Flight Engineer
Flight Engineer
  • 258 Views

Hello Trevor

Sorry, I forgot to include the arch option. So, the full command should have been:

auditctl -a exit,always -F arch=b64 -S execve

Regards

Ad_astra
Flight Engineer Flight Engineer
Flight Engineer
  • 177 Views

Hi

There's not much activity on this thread, anymore. Please can we have a solution to this question?

Thanks

Ad_astra
Flight Engineer Flight Engineer
Flight Engineer
  • 48 Views

Hello

An update or an approved resolution would be good for this thread, please! 

Thank you 

Join the discussion
You must log in to join this conversation.