文件操作 - processtracking.txt
返回文件管理
返回主菜单
删除本文件
文件: /root/Desktop/tmp/csf/processtracking.txt
编辑文件内容
From: root To: root Subject: lfd on [hostname]: Suspicious process running under user [user] Time: [time] PID: [pid] Account: [user] Uptime: [uptime] seconds Executable: [exe] Command Line (often faked in exploits): [cmdline] Network connections by the process (if any): [sockets] Files open by the process (if any): [files] Memory maps by the process (if any): [maps]
修改文件时间
将文件时间修改为当前时间的前一年
删除文件