Linux Kernel Process Accounting, (Wed, Aug 12th)
Brief
A couple of days ago, Xavier posted about Atuin to gain more insight into the command history. Atuin does a great job of better organizing what is usually handled by “bash_history” and collecting meaningful additional data. Our reader David commented that this can also be done quite well with Linux’s kernel process accounting feature, and I think he is very right.
I really like Linux process accounting for a number of reasons, so here is a quick introduction.
Linux Kernel Process Accounting - SANS Internet Storm Center