Listing The Last Modified Files In Debian Or Ubuntu

You might be asking yourself why would I care to list the last modified file/s right? Well if your in the security world then you know sometimes it’s important especially in a compromised server/workstation. It’s important to check what files may have been modified to help the attacker, for example, the editing of native configurations or scripts can facilitate permanent access to a system. It’s also important when trying to identify the potential root of the problem.

 

This command will list all files that were recently modified by without any real order.

ls -t

This command will list all files that were recently modified separating all file names by line by line.

ls -1t

This command will list all files that were recently modified separating all file names by line by line and limiting the amount displayed by 10

ls -1t | tail -10

 

I am sure there are more aggressive methods but this is a simple one that works pretty solid on any Linux distribution with bash.

Comments

comments

Published by

Miguel

Hi, My name is Miguel Vallejo and I'm the Founder & CEO of Web Semantics (www.websemantics.com). As A Child of the internet I'm a self-taught Web Developer & Network Engineer with over 15 Years of Professional Experience, Specializing in Linux/Unix Systems (Debian, Redhat & CentOS Distributions), Virtualization (KVM & VMware). I have a passion for Network Security, Information Technology, Cloud Infrastructures(Open Stack) , open source Web Development and anything that involves technology. I speak English and Spanish fluently and have worked on and with Bilingual Infrastructures (English & Spanish). I Like challenges and hate anything mundane, I am a bit anti-social (naturally lol...). I dislike those who are dishonest and who like to take advantage of others, like Julian Assange I enjoy crushing bastards.

Leave a Reply