https://x7peeps.com/tags/bash_history/index.htmlHugozh-CNMon, 15 Jun 2026 12:00:00 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E5%BA%94%E6%80%A5%E5%93%8D%E5%BA%94/0x03%E5%8F%96%E8%AF%81%E5%88%86%E6%9E%90/%E5%91%BD%E4%BB%A4%E8%A1%8C%E5%8E%86%E5%8F%B2%E5%8F%96%E8%AF%81%E4%B8%8E%E6%94%BB%E5%87%BB%E8%80%85%E8%A1%8C%E4%B8%BA%E8%BF%98%E5%8E%9F/index.htmlMon, 15 Jun 2026 12:00:00 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E5%BA%94%E6%80%A5%E5%93%8D%E5%BA%94/0x03%E5%8F%96%E8%AF%81%E5%88%86%E6%9E%90/%E5%91%BD%E4%BB%A4%E8%A1%8C%E5%8E%86%E5%8F%B2%E5%8F%96%E8%AF%81%E4%B8%8E%E6%94%BB%E5%87%BB%E8%80%85%E8%A1%8C%E4%B8%BA%E8%BF%98%E5%8E%9F/index.html围绕 bash_history、zsh_history、PowerShell 历史、ConsoleHost 与 doskey 等证据，分析如何在应急响应中恢复攻击者的操作链并识别清痕行为。