Some logs to watch (cont.)

• Other logs to watch

• /var/log/secure

  • Records logins
    • Shows who logged in
    • When they did it
    • Where they logged in

• lastlog

  • Use last command to also show logins

Notes: