Watch the shell commands being executed actively. This beacon requires strace.
salt.beacons.sh.
__virtual__
()¶Only load if strace is installed
salt.beacons.sh.
beacon
(config)¶Scan the shell execve routines. This beacon will convert all login shells
beacons:
sh: []
salt.beacons.sh.
validate
(config)¶Validate the beacon configuration
Docs for previous releases are available on readthedocs.org.
Latest Salt release: 2018.3.0