Forum Discussion

Duncan_Proffit1's avatar
Duncan_Proffit1
Icon for Nimbostratus rankNimbostratus
Jul 14, 2020

QKView logging entry - Hacking

Hi all,

If someone ran a qkview call on the command line, would there be any logging entry anywhere?

So, the question relates to a pen test activity, and the ability to remain unseen

Will the admins be able to see the command being issued?

 

Thanks

BIG-IP
hacking
pen testing
qkview
security
  • F5SJ_'s avatar
    F5SJ_
    Icon for Altocumulus rankAltocumulus
    Jul 14, 2020

    Yes, logs will come in audit files, under /var/log, in audit.

    It will looks like: AUDIT - pid=xxxx user=xxxx folder=/Common module=(tmos)# status=[Command OK] cmd_data=run /util qkview