Removing traces of unix system is very important issue for offensive security.
That needs to be cleaned a portion of the log files I’ve shared below.
Solaris System Logs
==
cat /dev/null > /var/adm/wtmpx
cat /dev/null > /var/adm/utmpx
cat /dev/null > /var/adm/loginlog
cat /dev/null > /var/adm/lastlog
cat /dev/null > /var/adm/sulog
cat /dev/null > /var/adm/messages
Redhat System Logs
==
Located in /etc/syslog.conf
Common Linux log files name and usage
==
/var/log/message: General message and system related stuff
/var/log/auth.log: Authenication logs
/var/log/kern.log: Kernel logs
/var/log/cron.log: Crond logs (cron job)
/var/log/maillog: Mail server logs
/var/log/qmail/ : Qmail log directory (more files inside this directory)
/var/log/httpd/: Apache access and error logs directory
/var/log/lighttpd: Lighttpd access and error logs directory
/var/log/boot.log : System boot log
/var/log/mysqld.log: MySQL database server log file
/var/log/secure: Authentication log
/var/log/utmp or /var/log/wtmp : Login records file
/var/log/yum.log: Yum log files
Apache Logs
==
errorlogs
accesslogs
Shell Logs
==
.bash_history
Application Logs
Database Logs
22.03.2010 – izmir