Shell

zsh History

zsh history files may contain credentials, tokens, connection strings, hostnames, internal paths, or other sensitive command data.

Metadata

  • id: shell.zsh-history
  • category: shell
  • sensitivity: high
  • subcategory: zsh
  • artifact types: history
  • tags: zsh, shell, history

Path Matchers

PathKindPlatforms
$HOME/.zsh_historyfilelinux, macos

Impact

  • credential_access
  • discovery

References

On this page