basic linux IR

1. active logins

• 1. w
• 2. who -u
• 3. whois

2. previous logins

• 1. last

3. history

• 1. cat ~/.bash_history

4. processes

• 1. top
• 2. lsof -p
• 3. ps auxf

5. network

• 1. lsof -i