Can somebody please help me to know if below required infos are logged or not? If yes, how can I get them?
- Successful and failed authentication attempts
- Use of root privilege accounts, such as through su and sudo
- Denied inbound connections, e.g. those blocked by packet filter
- Command and shell history
(PS: I am a beginner)
