cancel
Showing results for 
Search instead for 
Did you mean: 
Login & Join the DevCentral Connects Group to watch the Recorded LiveStream (May 12) on Basic iControl Security - show notes included.

QKView logging entry - Hacking

Duncan_Proffit1
Nimbostratus
Nimbostratus

Hi all,

If someone ran a qkview call on the command line, would there be any logging entry anywhere?

So, the question relates to a pen test activity, and the ability to remain unseen

Will the admins be able to see the command being issued?

 

Thanks

1 REPLY 1

F5SJ_
Altocumulus
Altocumulus

Yes, logs will come in audit files, under /var/log, in audit.

It will looks like: AUDIT - pid=xxxx user=xxxx folder=/Common module=(tmos)# status=[Command OK] cmd_data=run /util qkview