Which file contains information about past successful user logins on Unix systems?

The correct answer is A. wtmp. In Linux, the last command shows successful login attempts and displays session information (pts, source, date and length). The lastb command records all bad login attempts. Both share the same man page, but the difference is that last reads the binary /var/log/wtmp file, and…

Incident Response & Cyber Kill Chain

Question

Options

Awtmp
Bbtmp
Cctmp
Dutmp

How the community answered

(51 responses)

A
90% (46)
B
2% (1)
C
6% (3)
D
2% (1)

Explanation

In Linux, the last command shows successful login attempts and displays session information (pts, source, date and length). The lastb command records all bad login attempts. Both share the same man page, but the difference is that last reads the binary /var/log/wtmp file, and lastb reads the /var/log/btmp file by

Topics

#Unix log files#wtmp#user login history#log analysis

Community Discussion

No community discussion yet for this question.

Full GCIH Practice