Shell

sh History

POSIX sh history files may contain credentials, tokens, connection strings, hostnames, internal paths, or other sensitive command data.

Metadata

  • id: shell.sh-history
  • category: shell
  • sensitivity: high
  • subcategory: sh
  • artifact types: history
  • tags: sh, shell, history

Path Matchers

PathKindPlatforms
$HOME/.sh_historyfilelinux, macos

Impact

  • credential_access
  • discovery

On this page