mlocate

There may be a mlocate.db file with past mlocate command queries. May come in handy looking for sensitive files

find / -group mlocate 2>/dev/null
/var/lib/mlocate/mlocate.db
strings mlocate.db | grep -e bob.smith -e cred -e passw -e pwd
strings mlocate.db | grep sus_folder -A 3 -B 3

Last updated