Dear Team,

Our company has recently a spate of attack at one of our customer server that have resulted in application corrupted and some important database deleted. I suspect somebody tried something, i want to know the commands that done by individual users ( i have psacct in my server but not showing full command line). So please suggest me better way to monitor RHEL servers.


Regards
Abdul6d