"acct" Exercise 1. Install acct $ sudo apt-get install acct Installed tools are : lastcomm ac sa 2. Now try them out Logins $ last Last command detail $ sudo lastcomm User connect time $ ac -p Previously executed command summary $ sudo sa 3. Contemplate output from commands See the output and maybe pipe via "head" or "less". This is a lot of data. Are there other ways to detect access?