Forum Discussion
Duncan_Proffit1
Jul 14, 2020Nimbostratus
QKView logging entry - Hacking
Hi all,
If someone ran a qkview call on the command line, would there be any logging entry anywhere?
So, the question relates to a pen test activity, and the ability to remain unseen
Will the admins be able to see the command being issued?
Thanks
- F5SJ_Altocumulus
Yes, logs will come in audit files, under /var/log, in audit.
It will looks like: AUDIT - pid=xxxx user=xxxx folder=/Common module=(tmos)# status=[Command OK] cmd_data=run /util qkview
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects