Altering
Accounting Files in Unix
¨utmp,
wtmp, and lastlog files are the main accounting files in Unix
–Written
in special binary format
–Can be edited using tools such as remove, wtmped, marry,
cloak, logwedit, wzap, and zapper
•Tools
included in RootKits