• 115:
• 499:
• 500: /usr/bin/csh
• 501: /usr/ucb/quota
• 502: /usr/bin/tty
• 505: /usr/bin/ln
• 506: /usr/bin/sh
• 507: /usr/bin/id
• 508: /usr/bin/chmod

Back to root

Processes Info for 115

Audit Uid: jhoaglan
Parent: (not in log)
Execed File: (none in log)

no forks recorded

Audit Uid: jhoaglan
Parent: (not in log)
Execed File: (none in log)

Forked Processes:

• 500: /usr/bin/csh at Tue Jul 5 19:31:14 1994

Audit Uid: jhoaglan
Parent: 499
Execed File: /usr/bin/csh at Tue Jul 5 19:31:14 1994

Forked Processes:

• 501: /usr/ucb/quota at Tue Jul 5 19:31:14 1994
• 502: /usr/bin/tty at Tue Jul 5 19:31:15 1994
• 505: /usr/bin/ln at Tue Jul 5 19:32:26 1994
• 506: /usr/bin/sh at Tue Jul 5 19:32:29 1994

Creates:

• /usr/export/home/jhoaglan/.history at Tue Jul 5 19:32:47 1994

Audit Uid: jhoaglan
Parent: 500
Execed File: /usr/ucb/quota at Tue Jul 5 19:31:14 1994

no forks recorded

Audit Uid: jhoaglan
Parent: 500
Execed File: /usr/bin/tty at Tue Jul 5 19:31:15 1994

no forks recorded

Audit Uid: jhoaglan
Parent: 500
Execed File: /usr/bin/ln at Tue Jul 5 19:32:26 1994

no forks recorded

Audit Uid: jhoaglan
Parent: 500
Execed File: /usr/bin/sh at Tue Jul 5 19:32:29 1994

Forked Processes:

• 507: /usr/bin/id at Tue Jul 5 19:32:32 1994
• 508: /usr/bin/chmod at Tue Jul 5 19:32:42 1994

Audit Uid: jhoaglan
Parent: 506
Execed File: /usr/bin/id at Tue Jul 5 19:32:32 1994

no forks recorded

Audit Uid: jhoaglan
Parent: 506
Execed File: /usr/bin/chmod at Tue Jul 5 19:32:42 1994

no forks recorded

Chmods:

• /etc/security/password.adjunct from 104644 to 00666 at Tue Jul 5 19:32:42 1994

Back to root