Shell

Bash History

Bash history files may contain credentials, tokens, connection strings, hostnames, internal paths, or other sensitive command data.

Metadata

  • id: shell.bash-history
  • category: shell
  • sensitivity: high
  • subcategory: bash
  • artifact types: history
  • tags: bash, shell, history

Path Matchers

PathKindPlatforms
$HOME/.bash_historyfilelinux, macos

Impact

  • credential_access
  • discovery

References

On this page