{"id":22715,"date":"2022-03-11T10:50:43","date_gmt":"2022-03-11T10:50:43","guid":{"rendered":"https:\/\/kalilinuxtutorials.com\/?p=22715"},"modified":"2022-03-11T10:50:45","modified_gmt":"2022-03-11T10:50:45","slug":"whatfiles","status":"publish","type":"post","link":"https:\/\/kalilinuxtutorials.com\/whatfiles\/","title":{"rendered":"Whatfiles : Log What Files Are Accessed By Any Linux Process"},"content":{"rendered":"\n<p><strong>Whatfiles<\/strong> is a Linux utility that logs what files another program reads\/writes\/creates\/deletes on your system. It traces any new processes and threads that are created by the targeted process as well.<\/p>\n\n\n\n<p class=\"has-text-align-center has-vivid-green-cyan-background-color has-background\"><a href=\"https:\/\/github.com\/spieglt\/whatfiles#rationale\"><\/a><strong>Rationale<\/strong><\/p>\n\n\n\n<p>I&#8217;ve long been frustrated at the lack of a simple utility to see which files a process touches from&nbsp;<code><strong>main()<\/strong><\/code>&nbsp;to exit. Whether you don&#8217;t trust a software vendor or are concerned about malware, it&#8217;s important to be able to know what a program or installer does to your system.&nbsp;<code><strong>lsof<\/strong><\/code>&nbsp;only observes a moment in time and&nbsp;<code><strong>strace<\/strong><\/code>&nbsp;is large and somewhat complicated.<\/p>\n\n\n\n<p class=\"has-text-align-center has-vivid-green-cyan-background-color has-background\"><a href=\"https:\/\/github.com\/spieglt\/whatfiles#sample-output\"><\/a><strong>Sample output<\/strong><\/p>\n\n\n\n<p class=\"has-vivid-green-cyan-color has-black-background-color has-text-color has-background\"><strong>mode: read, file: \/home\/theron\/.gimp-2.8\/tool-options\/gimp-clone-tool, syscall: openat(), PID: 8566, process: gimp<br>mode: read, file: \/home\/theron\/.gimp-2.8\/tool-options\/gimp-heal-tool, syscall: openat(), PID: 8566, process: gimp<br>mode: read, file: \/home\/theron\/.gimp-2.8\/tool-options\/gimp-perspective-clone-tool, syscall: openat(), PID: 8566, process: gimp<br>mode: read, file: \/home\/theron\/.gimp-2.8\/tool-options\/gimp-convolve-tool, syscall: openat(), PID: 8566, process: gimp<br>mode: read, file: \/home\/theron\/.gimp-2.8\/tool-options\/gimp-smudge-tool, syscall: openat(), PID: 8566, process: gimp<br>mode: read, file: \/home\/theron\/.gimp-2.8\/tool-options\/gimp-dodge-burn-tool, syscall: openat(), PID: 8566, process: gimp<br>mode: read, file: \/home\/theron\/.gimp-2.8\/tool-options\/gimp-desaturate-tool, syscall: openat(), PID: 8566, process: gimp<br>mode: read, file: \/home\/theron\/.gimp-2.8\/plug-ins, syscall: openat(), PID: 8566, process: gimp<br>mode: read, file: \/usr\/lib\/gimp\/2.0\/plug-ins, syscall: openat(), PID: 8566, process: gimp<br>mode: read, file: \/home\/theron\/.gimp-2.8\/pluginrc, syscall: openat(), PID: 8566, process: gimp<br>mode: read, file: \/usr\/share\/locale\/en_US\/LC_MESSAGES\/gimp20-std-plug-ins.mo, syscall: openat(), PID: 8566, process: gimp<br>mode: read, file: \/usr\/lib\/gimp\/2.0\/plug-ins\/script-fu, syscall: openat(), PID: 8566, process: gimp<br>mode: read, file: \/etc\/ld.so.cache, syscall: openat(), PID: 8574, process: \/usr\/lib\/gimp\/2.0\/plug-ins\/script-fu<br>mode: read, file: \/etc\/ld.so.cache, syscall: openat(), PID: 8574, process: \/usr\/lib\/gimp\/2.0\/plug-ins\/script-fu<br>mode: read, file: \/usr\/lib\/libgimpui-2.0.so.0, syscall: openat(), PID: 8574, process: \/usr\/lib\/gimp\/2.0\/plug-ins\/script-fu<br>mode: read, file: \/usr\/lib\/libgimpwidgets-2.0.so.0, syscall: openat(), PID: 8574, process: \/usr\/lib\/gimp\/2.0\/plug-ins\/script-fu<br>mode: read, file: \/usr\/lib\/libgimpwidgets-2.0.so.0, syscall: openat(), PID: 8574, process: \/usr\/lib\/gimp\/2.0\/plug-ins\/script-fu<br>mode: read, file: \/usr\/lib\/libgimp-2.0.so.0, syscall: openat(), PID: 8574, process: \/usr\/lib\/gimp\/2.0\/plug-ins\/script-fu<br>mode: read, file: \/usr\/lib\/libgimpcolor-2.0.so.0, syscall: openat(), PID: 8574, process: \/usr\/lib\/gimp\/2.0\/plug-ins\/script-fu<\/strong><\/p>\n\n\n\n<p class=\"has-text-align-center has-vivid-green-cyan-background-color has-background\"><strong>Use<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>basic use, launches&nbsp;<code><strong>ls<\/strong><\/code>&nbsp;and writes output to a log file in the current directory:<code><strong>$ whatfiles ls -lah ~\/Documents<\/strong><\/code><\/li><li>specify output file location with&nbsp;<strong><code>-o<\/code>:<code>$ whatfiles -o MyLogFile cd ..<\/code><\/strong><\/li><li>include debug output, print to stdout rather than log file:<code><strong>$ whatfiles -d -s apt install zoom<\/strong><\/code><\/li><li>attach to currently running process (requires root privileges):<code><strong>$ sudo whatfiles -p 1234<\/strong><\/code><\/li><\/ul>\n\n\n\n<p class=\"has-text-align-center has-vivid-green-cyan-background-color has-background\"><strong>Compilation (requires&nbsp;<code>gcc<\/code>&nbsp;and&nbsp;<code>make<\/code>)<\/strong><\/p>\n\n\n\n<p class=\"has-vivid-green-cyan-color has-black-background-color has-text-color has-background\"><strong>$ cd whatfiles<br>$ make<br>$ sudo make install<\/strong><\/p>\n\n\n\n<div class=\"wp-block-buttons is-content-justification-center is-layout-flex wp-container-core-buttons-is-layout-16018d1d wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button is-style-outline is-style-outline--1\"><a class=\"wp-block-button__link has-vivid-cyan-blue-background-color has-background\" href=\"https:\/\/github.com\/spieglt\/whatfiles\"><strong>Download<\/strong><\/a><\/div>\n<\/div>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Whatfiles is a Linux utility that logs what files another program reads\/writes\/creates\/deletes on your system. It traces any new processes and threads that are created by the targeted process as well. Rationale I&#8217;ve long been frustrated at the lack of a simple utility to see which files a process touches from&nbsp;main()&nbsp;to exit. Whether you don&#8217;t [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":22722,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/blogger.googleusercontent.com\/img\/a\/AVvXsEiYBGDmquVlqGTepMZqovtY7Vmc3T6FMfBgT_k5Jjpn1btmafRRFYy8SElLVw2q82Y2YS0yaR132yA9kn2da2S-V2nkVs9faO_Jw5H3m09fgYLEM8s1N4tvzF6ZM7iYhTkiA0PKO3E7aCq5Mk30iBax5g3uCNNC5GBKce1YgMqa6Yraui_0etDYGpHY=s728","fifu_image_alt":"","_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[28],"tags":[4831,1937,4830],"class_list":["post-22715","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-kali","tag-linux-process","tag-log","tag-whatfiles"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Whatfiles : Log What Files Are Accessed By Any Linux Process<\/title>\n<meta name=\"description\" content=\"Whatfiles is a Linux utility that logs what files another program reads\/writes\/creates\/deletes on your system.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kalilinuxtutorials.com\/whatfiles\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Whatfiles : Log What Files Are Accessed By Any Linux Process\" \/>\n<meta property=\"og:description\" content=\"Whatfiles is a Linux utility that logs what files another program reads\/writes\/creates\/deletes on your system.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kalilinuxtutorials.com\/whatfiles\/\" \/>\n<meta property=\"og:site_name\" content=\"Kali Linux Tutorials\" \/>\n<meta property=\"article:published_time\" content=\"2022-03-11T10:50:43+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-03-11T10:50:45+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/a\/AVvXsEiYBGDmquVlqGTepMZqovtY7Vmc3T6FMfBgT_k5Jjpn1btmafRRFYy8SElLVw2q82Y2YS0yaR132yA9kn2da2S-V2nkVs9faO_Jw5H3m09fgYLEM8s1N4tvzF6ZM7iYhTkiA0PKO3E7aCq5Mk30iBax5g3uCNNC5GBKce1YgMqa6Yraui_0etDYGpHY=s728\" \/>\n<meta name=\"author\" content=\"R K\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/a\/AVvXsEiYBGDmquVlqGTepMZqovtY7Vmc3T6FMfBgT_k5Jjpn1btmafRRFYy8SElLVw2q82Y2YS0yaR132yA9kn2da2S-V2nkVs9faO_Jw5H3m09fgYLEM8s1N4tvzF6ZM7iYhTkiA0PKO3E7aCq5Mk30iBax5g3uCNNC5GBKce1YgMqa6Yraui_0etDYGpHY=s728\" \/>\n<meta name=\"twitter:creator\" content=\"@CyberEdition\" \/>\n<meta name=\"twitter:site\" content=\"@CyberEdition\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"R K\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/kalilinuxtutorials.com\/whatfiles\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/kalilinuxtutorials.com\/whatfiles\/\"},\"author\":{\"name\":\"R K\",\"@id\":\"https:\/\/kalilinuxtutorials.com\/#\/schema\/person\/69444b58b9e267a4cf08fceb34b6f6ad\"},\"headline\":\"Whatfiles : Log What Files Are Accessed By Any Linux Process\",\"datePublished\":\"2022-03-11T10:50:43+00:00\",\"dateModified\":\"2022-03-11T10:50:45+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/kalilinuxtutorials.com\/whatfiles\/\"},\"wordCount\":423,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/kalilinuxtutorials.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/kalilinuxtutorials.com\/whatfiles\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blogger.googleusercontent.com\/img\/a\/AVvXsEiYBGDmquVlqGTepMZqovtY7Vmc3T6FMfBgT_k5Jjpn1btmafRRFYy8SElLVw2q82Y2YS0yaR132yA9kn2da2S-V2nkVs9faO_Jw5H3m09fgYLEM8s1N4tvzF6ZM7iYhTkiA0PKO3E7aCq5Mk30iBax5g3uCNNC5GBKce1YgMqa6Yraui_0etDYGpHY=s728\",\"keywords\":[\"Linux Process\",\"Log\",\"Whatfiles\"],\"articleSection\":[\"Kali Linux\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/kalilinuxtutorials.com\/whatfiles\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/kalilinuxtutorials.com\/whatfiles\/\",\"url\":\"https:\/\/kalilinuxtutorials.com\/whatfiles\/\",\"name\":\"Whatfiles : Log What Files Are Accessed By Any Linux Process\",\"isPartOf\":{\"@id\":\"https:\/\/kalilinuxtutorials.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/kalilinuxtutorials.com\/whatfiles\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/kalilinuxtutorials.com\/whatfiles\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blogger.googleusercontent.com\/img\/a\/AVvXsEiYBGDmquVlqGTepMZqovtY7Vmc3T6FMfBgT_k5Jjpn1btmafRRFYy8SElLVw2q82Y2YS0yaR132yA9kn2da2S-V2nkVs9faO_Jw5H3m09fgYLEM8s1N4tvzF6ZM7iYhTkiA0PKO3E7aCq5Mk30iBax5g3uCNNC5GBKce1YgMqa6Yraui_0etDYGpHY=s728\",\"datePublished\":\"2022-03-11T10:50:43+00:00\",\"dateModified\":\"2022-03-11T10:50:45+00:00\",\"description\":\"Whatfiles is a Linux utility that logs what files another program reads\/writes\/creates\/deletes on your system.\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/kalilinuxtutorials.com\/whatfiles\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/kalilinuxtutorials.com\/whatfiles\/#primaryimage\",\"url\":\"https:\/\/blogger.googleusercontent.com\/img\/a\/AVvXsEiYBGDmquVlqGTepMZqovtY7Vmc3T6FMfBgT_k5Jjpn1btmafRRFYy8SElLVw2q82Y2YS0yaR132yA9kn2da2S-V2nkVs9faO_Jw5H3m09fgYLEM8s1N4tvzF6ZM7iYhTkiA0PKO3E7aCq5Mk30iBax5g3uCNNC5GBKce1YgMqa6Yraui_0etDYGpHY=s728\",\"contentUrl\":\"https:\/\/blogger.googleusercontent.com\/img\/a\/AVvXsEiYBGDmquVlqGTepMZqovtY7Vmc3T6FMfBgT_k5Jjpn1btmafRRFYy8SElLVw2q82Y2YS0yaR132yA9kn2da2S-V2nkVs9faO_Jw5H3m09fgYLEM8s1N4tvzF6ZM7iYhTkiA0PKO3E7aCq5Mk30iBax5g3uCNNC5GBKce1YgMqa6Yraui_0etDYGpHY=s728\",\"width\":\"728\",\"height\":\"380\"},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/kalilinuxtutorials.com\/#website\",\"url\":\"https:\/\/kalilinuxtutorials.com\/\",\"name\":\"Kali Linux Tutorials\",\"description\":\"Kali Linux Tutorials\",\"publisher\":{\"@id\":\"https:\/\/kalilinuxtutorials.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/kalilinuxtutorials.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/kalilinuxtutorials.com\/#organization\",\"name\":\"Kali Linux Tutorials\",\"url\":\"https:\/\/kalilinuxtutorials.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/kalilinuxtutorials.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/kalilinuxtutorials.com\/wp-content\/uploads\/2025\/07\/Kali.png\",\"contentUrl\":\"https:\/\/kalilinuxtutorials.com\/wp-content\/uploads\/2025\/07\/Kali.png\",\"width\":272,\"height\":90,\"caption\":\"Kali Linux Tutorials\"},\"image\":{\"@id\":\"https:\/\/kalilinuxtutorials.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/CyberEdition\",\"https:\/\/www.threads.com\/@cybersecurityedition\",\"https:\/\/www.linkedin.com\/company\/cyberedition\",\"https:\/\/www.instagram.com\/cybersecurityedition\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/kalilinuxtutorials.com\/#\/schema\/person\/69444b58b9e267a4cf08fceb34b6f6ad\",\"name\":\"R K\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/kalilinuxtutorials.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d3937c9687f2da11bc0a716404ff91779fe19ca115208dbf66167ad353aca5aa?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d3937c9687f2da11bc0a716404ff91779fe19ca115208dbf66167ad353aca5aa?s=96&d=mm&r=g\",\"caption\":\"R K\"},\"url\":\"https:\/\/kalilinuxtutorials.com\/author\/ranjith\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Whatfiles : Log What Files Are Accessed By Any Linux Process","description":"Whatfiles is a Linux utility that logs what files another program reads\/writes\/creates\/deletes on your system.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kalilinuxtutorials.com\/whatfiles\/","og_locale":"en_US","og_type":"article","og_title":"Whatfiles : Log What Files Are Accessed By Any Linux Process","og_description":"Whatfiles is a Linux utility that logs what files another program reads\/writes\/creates\/deletes on your system.","og_url":"https:\/\/kalilinuxtutorials.com\/whatfiles\/","og_site_name":"Kali Linux Tutorials","article_published_time":"2022-03-11T10:50:43+00:00","article_modified_time":"2022-03-11T10:50:45+00:00","og_image":[{"url":"https:\/\/blogger.googleusercontent.com\/img\/a\/AVvXsEiYBGDmquVlqGTepMZqovtY7Vmc3T6FMfBgT_k5Jjpn1btmafRRFYy8SElLVw2q82Y2YS0yaR132yA9kn2da2S-V2nkVs9faO_Jw5H3m09fgYLEM8s1N4tvzF6ZM7iYhTkiA0PKO3E7aCq5Mk30iBax5g3uCNNC5GBKce1YgMqa6Yraui_0etDYGpHY=s728","type":"","width":"","height":""}],"author":"R K","twitter_card":"summary_large_image","twitter_image":"https:\/\/blogger.googleusercontent.com\/img\/a\/AVvXsEiYBGDmquVlqGTepMZqovtY7Vmc3T6FMfBgT_k5Jjpn1btmafRRFYy8SElLVw2q82Y2YS0yaR132yA9kn2da2S-V2nkVs9faO_Jw5H3m09fgYLEM8s1N4tvzF6ZM7iYhTkiA0PKO3E7aCq5Mk30iBax5g3uCNNC5GBKce1YgMqa6Yraui_0etDYGpHY=s728","twitter_creator":"@CyberEdition","twitter_site":"@CyberEdition","twitter_misc":{"Written by":"R K","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kalilinuxtutorials.com\/whatfiles\/#article","isPartOf":{"@id":"https:\/\/kalilinuxtutorials.com\/whatfiles\/"},"author":{"name":"R K","@id":"https:\/\/kalilinuxtutorials.com\/#\/schema\/person\/69444b58b9e267a4cf08fceb34b6f6ad"},"headline":"Whatfiles : Log What Files Are Accessed By Any Linux Process","datePublished":"2022-03-11T10:50:43+00:00","dateModified":"2022-03-11T10:50:45+00:00","mainEntityOfPage":{"@id":"https:\/\/kalilinuxtutorials.com\/whatfiles\/"},"wordCount":423,"commentCount":0,"publisher":{"@id":"https:\/\/kalilinuxtutorials.com\/#organization"},"image":{"@id":"https:\/\/kalilinuxtutorials.com\/whatfiles\/#primaryimage"},"thumbnailUrl":"https:\/\/blogger.googleusercontent.com\/img\/a\/AVvXsEiYBGDmquVlqGTepMZqovtY7Vmc3T6FMfBgT_k5Jjpn1btmafRRFYy8SElLVw2q82Y2YS0yaR132yA9kn2da2S-V2nkVs9faO_Jw5H3m09fgYLEM8s1N4tvzF6ZM7iYhTkiA0PKO3E7aCq5Mk30iBax5g3uCNNC5GBKce1YgMqa6Yraui_0etDYGpHY=s728","keywords":["Linux Process","Log","Whatfiles"],"articleSection":["Kali Linux"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/kalilinuxtutorials.com\/whatfiles\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/kalilinuxtutorials.com\/whatfiles\/","url":"https:\/\/kalilinuxtutorials.com\/whatfiles\/","name":"Whatfiles : Log What Files Are Accessed By Any Linux Process","isPartOf":{"@id":"https:\/\/kalilinuxtutorials.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kalilinuxtutorials.com\/whatfiles\/#primaryimage"},"image":{"@id":"https:\/\/kalilinuxtutorials.com\/whatfiles\/#primaryimage"},"thumbnailUrl":"https:\/\/blogger.googleusercontent.com\/img\/a\/AVvXsEiYBGDmquVlqGTepMZqovtY7Vmc3T6FMfBgT_k5Jjpn1btmafRRFYy8SElLVw2q82Y2YS0yaR132yA9kn2da2S-V2nkVs9faO_Jw5H3m09fgYLEM8s1N4tvzF6ZM7iYhTkiA0PKO3E7aCq5Mk30iBax5g3uCNNC5GBKce1YgMqa6Yraui_0etDYGpHY=s728","datePublished":"2022-03-11T10:50:43+00:00","dateModified":"2022-03-11T10:50:45+00:00","description":"Whatfiles is a Linux utility that logs what files another program reads\/writes\/creates\/deletes on your system.","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kalilinuxtutorials.com\/whatfiles\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kalilinuxtutorials.com\/whatfiles\/#primaryimage","url":"https:\/\/blogger.googleusercontent.com\/img\/a\/AVvXsEiYBGDmquVlqGTepMZqovtY7Vmc3T6FMfBgT_k5Jjpn1btmafRRFYy8SElLVw2q82Y2YS0yaR132yA9kn2da2S-V2nkVs9faO_Jw5H3m09fgYLEM8s1N4tvzF6ZM7iYhTkiA0PKO3E7aCq5Mk30iBax5g3uCNNC5GBKce1YgMqa6Yraui_0etDYGpHY=s728","contentUrl":"https:\/\/blogger.googleusercontent.com\/img\/a\/AVvXsEiYBGDmquVlqGTepMZqovtY7Vmc3T6FMfBgT_k5Jjpn1btmafRRFYy8SElLVw2q82Y2YS0yaR132yA9kn2da2S-V2nkVs9faO_Jw5H3m09fgYLEM8s1N4tvzF6ZM7iYhTkiA0PKO3E7aCq5Mk30iBax5g3uCNNC5GBKce1YgMqa6Yraui_0etDYGpHY=s728","width":"728","height":"380"},{"@type":"WebSite","@id":"https:\/\/kalilinuxtutorials.com\/#website","url":"https:\/\/kalilinuxtutorials.com\/","name":"Kali Linux Tutorials","description":"Kali Linux Tutorials","publisher":{"@id":"https:\/\/kalilinuxtutorials.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kalilinuxtutorials.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/kalilinuxtutorials.com\/#organization","name":"Kali Linux Tutorials","url":"https:\/\/kalilinuxtutorials.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kalilinuxtutorials.com\/#\/schema\/logo\/image\/","url":"https:\/\/kalilinuxtutorials.com\/wp-content\/uploads\/2025\/07\/Kali.png","contentUrl":"https:\/\/kalilinuxtutorials.com\/wp-content\/uploads\/2025\/07\/Kali.png","width":272,"height":90,"caption":"Kali Linux Tutorials"},"image":{"@id":"https:\/\/kalilinuxtutorials.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/CyberEdition","https:\/\/www.threads.com\/@cybersecurityedition","https:\/\/www.linkedin.com\/company\/cyberedition","https:\/\/www.instagram.com\/cybersecurityedition\/"]},{"@type":"Person","@id":"https:\/\/kalilinuxtutorials.com\/#\/schema\/person\/69444b58b9e267a4cf08fceb34b6f6ad","name":"R K","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kalilinuxtutorials.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d3937c9687f2da11bc0a716404ff91779fe19ca115208dbf66167ad353aca5aa?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d3937c9687f2da11bc0a716404ff91779fe19ca115208dbf66167ad353aca5aa?s=96&d=mm&r=g","caption":"R K"},"url":"https:\/\/kalilinuxtutorials.com\/author\/ranjith\/"}]}},"jetpack_featured_media_url":"https:\/\/blogger.googleusercontent.com\/img\/a\/AVvXsEiYBGDmquVlqGTepMZqovtY7Vmc3T6FMfBgT_k5Jjpn1btmafRRFYy8SElLVw2q82Y2YS0yaR132yA9kn2da2S-V2nkVs9faO_Jw5H3m09fgYLEM8s1N4tvzF6ZM7iYhTkiA0PKO3E7aCq5Mk30iBax5g3uCNNC5GBKce1YgMqa6Yraui_0etDYGpHY=s728","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":33200,"url":"https:\/\/kalilinuxtutorials.com\/linux-expl0rer\/","url_meta":{"origin":22715,"position":0},"title":"Linux Expl0rer &#8211; A Comprehensive Forensics Toolbox For Linux Endpoints","author":"Varshini","date":"June 3, 2024","format":false,"excerpt":"Linux Expl0rer, an easy-to-use, live forensics toolbox designed for Linux endpoints. Built with Python and Flask, this toolkit facilitates comprehensive analysis and monitoring of system activities. Despite no longer being maintained, Linux Expl0rer remains a valuable resource for those needing to inspect processes, search for suspicious files, and more, with\u2026","rel":"","context":"In &quot;Forensics&quot;","block_context":{"text":"Forensics","link":"https:\/\/kalilinuxtutorials.com\/category\/f\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEgeKrRvZszJ3Z0VXiqMUOsGPLKZSjrse_hBK_Z8Pp5iLTFHq1AuLehEZ2MzAsb3vcRMnO_MfK8mWvcX5Y990sSmmaR6hMcqt9eqEPA8_Q9RNdtf-6gvp1hvbUdQpadCwxoUKEfEwlvvpiG_cudNKYfneWWNdZxydZzUe_205mpBcjw6hWPw_d3M0tMO6ZnX\/s16000\/Linux%20Expl0rer%20.webp?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEgeKrRvZszJ3Z0VXiqMUOsGPLKZSjrse_hBK_Z8Pp5iLTFHq1AuLehEZ2MzAsb3vcRMnO_MfK8mWvcX5Y990sSmmaR6hMcqt9eqEPA8_Q9RNdtf-6gvp1hvbUdQpadCwxoUKEfEwlvvpiG_cudNKYfneWWNdZxydZzUe_205mpBcjw6hWPw_d3M0tMO6ZnX\/s16000\/Linux%20Expl0rer%20.webp?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEgeKrRvZszJ3Z0VXiqMUOsGPLKZSjrse_hBK_Z8Pp5iLTFHq1AuLehEZ2MzAsb3vcRMnO_MfK8mWvcX5Y990sSmmaR6hMcqt9eqEPA8_Q9RNdtf-6gvp1hvbUdQpadCwxoUKEfEwlvvpiG_cudNKYfneWWNdZxydZzUe_205mpBcjw6hWPw_d3M0tMO6ZnX\/s16000\/Linux%20Expl0rer%20.webp?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEgeKrRvZszJ3Z0VXiqMUOsGPLKZSjrse_hBK_Z8Pp5iLTFHq1AuLehEZ2MzAsb3vcRMnO_MfK8mWvcX5Y990sSmmaR6hMcqt9eqEPA8_Q9RNdtf-6gvp1hvbUdQpadCwxoUKEfEwlvvpiG_cudNKYfneWWNdZxydZzUe_205mpBcjw6hWPw_d3M0tMO6ZnX\/s16000\/Linux%20Expl0rer%20.webp?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEgeKrRvZszJ3Z0VXiqMUOsGPLKZSjrse_hBK_Z8Pp5iLTFHq1AuLehEZ2MzAsb3vcRMnO_MfK8mWvcX5Y990sSmmaR6hMcqt9eqEPA8_Q9RNdtf-6gvp1hvbUdQpadCwxoUKEfEwlvvpiG_cudNKYfneWWNdZxydZzUe_205mpBcjw6hWPw_d3M0tMO6ZnX\/s16000\/Linux%20Expl0rer%20.webp?resize=1050%2C600&ssl=1 3x, https:\/\/i0.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEgeKrRvZszJ3Z0VXiqMUOsGPLKZSjrse_hBK_Z8Pp5iLTFHq1AuLehEZ2MzAsb3vcRMnO_MfK8mWvcX5Y990sSmmaR6hMcqt9eqEPA8_Q9RNdtf-6gvp1hvbUdQpadCwxoUKEfEwlvvpiG_cudNKYfneWWNdZxydZzUe_205mpBcjw6hWPw_d3M0tMO6ZnX\/s16000\/Linux%20Expl0rer%20.webp?resize=1400%2C800&ssl=1 4x"},"classes":[]},{"id":6902,"url":"https:\/\/kalilinuxtutorials.com\/fsmon-monitor-filesystem\/","url_meta":{"origin":22715,"position":1},"title":"FSMon : Monitor Filesystem On iOS \/ OS X \/ Android \/ FirefoxOS \/ Linux","author":"R K","date":"October 17, 2019","format":false,"excerpt":"FSMon or FileSystem Monitor utility that runs on Linux, Android, iOS and OSX. Brought to you by Sergi \u00c0lvarez at Nowsecure and distributed under the MIT license. Usage The tool retrieves file system events from a specific directory and shows them in colorful format or in JSON. It is possible\u2026","rel":"","context":"In &quot;Kali Linux&quot;","block_context":{"text":"Kali Linux","link":"https:\/\/kalilinuxtutorials.com\/category\/kali\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":38610,"url":"https:\/\/kalilinuxtutorials.com\/running-ai-transcription-in-a-linux-workflow\/","url_meta":{"origin":22715,"position":2},"title":"Running AI Transcription in a Linux Workflow","author":"0xSnow","date":"March 5, 2026","format":false,"excerpt":"For years, converting spoken content into text on Linux felt like an awkward side task. The tools existed, but they rarely fit neatly into everyday workflows. One utility extracted audio, another handled formatting, and transcription itself often meant switching to a completely different platform. Things look different now. AI transcription\u2026","rel":"","context":"In &quot;TECH&quot;","block_context":{"text":"TECH","link":"https:\/\/kalilinuxtutorials.com\/category\/tech\/"},"img":{"alt_text":"AI Transcription in a Linux Workflow","src":"https:\/\/i0.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhQ1Oz0HzmFADkfiRITH6_yXLVGXq45yKp7TUeJxaZ20szZ7ARX32-2Eo-Tl0P6kvvUhoqpa1QNPftl0UyfaNoF7yLaC5mhNH6Gzt64L7luhXKl2AbEZ5fWjqA5VM0WpFqQ6T-q8RGIhZU99I8VQpAwgW9XcoUGQ_GGUBnnfGi-OwIhjzuqOsffLW9Lz9A\/s700\/linux%20ai.jpg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhQ1Oz0HzmFADkfiRITH6_yXLVGXq45yKp7TUeJxaZ20szZ7ARX32-2Eo-Tl0P6kvvUhoqpa1QNPftl0UyfaNoF7yLaC5mhNH6Gzt64L7luhXKl2AbEZ5fWjqA5VM0WpFqQ6T-q8RGIhZU99I8VQpAwgW9XcoUGQ_GGUBnnfGi-OwIhjzuqOsffLW9Lz9A\/s700\/linux%20ai.jpg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhQ1Oz0HzmFADkfiRITH6_yXLVGXq45yKp7TUeJxaZ20szZ7ARX32-2Eo-Tl0P6kvvUhoqpa1QNPftl0UyfaNoF7yLaC5mhNH6Gzt64L7luhXKl2AbEZ5fWjqA5VM0WpFqQ6T-q8RGIhZU99I8VQpAwgW9XcoUGQ_GGUBnnfGi-OwIhjzuqOsffLW9Lz9A\/s700\/linux%20ai.jpg?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhQ1Oz0HzmFADkfiRITH6_yXLVGXq45yKp7TUeJxaZ20szZ7ARX32-2Eo-Tl0P6kvvUhoqpa1QNPftl0UyfaNoF7yLaC5mhNH6Gzt64L7luhXKl2AbEZ5fWjqA5VM0WpFqQ6T-q8RGIhZU99I8VQpAwgW9XcoUGQ_GGUBnnfGi-OwIhjzuqOsffLW9Lz9A\/s700\/linux%20ai.jpg?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":22245,"url":"https:\/\/kalilinuxtutorials.com\/rclocals\/","url_meta":{"origin":22715,"position":3},"title":"RCLocals : Linux Startup Analyzer","author":"R K","date":"March 1, 2022","format":false,"excerpt":"RCLocals is inspired by 'Autoruns' from Sysinternals, RCLocals analyzes all Linux startup possibilities to find backdoors, also performs process integrity verification, scan for DLL injected processes and much more Things covered: \u00b7List GPG keys trusted by the system \u00b7Installed Packages \u00b7File integrity \u00b7Process integrity\u00a0(process and libraries loaded in a process\u2026","rel":"","context":"In &quot;Kali Linux&quot;","block_context":{"text":"Kali Linux","link":"https:\/\/kalilinuxtutorials.com\/category\/kali\/"},"img":{"alt_text":"","src":"https:\/\/blogger.googleusercontent.com\/img\/a\/AVvXsEgp6xhcXjJ2gCLWhFjIspSw3LrrtdxXa9Qf-CgcGRTaOHu8GMeYek65iza3QQQpLNNDok7Gxtf1li-OpO6nH2kgucgE1uIjO8V3poTYjfBk2KHYS7RDV8zkW_xCZ9l0IBONxa_HOXJHuKSB0gyKuwh0_6qZF5l4DofWPISY6thH9uFHrQ1JAoHT-3E5=s679","width":350,"height":200,"srcset":"https:\/\/blogger.googleusercontent.com\/img\/a\/AVvXsEgp6xhcXjJ2gCLWhFjIspSw3LrrtdxXa9Qf-CgcGRTaOHu8GMeYek65iza3QQQpLNNDok7Gxtf1li-OpO6nH2kgucgE1uIjO8V3poTYjfBk2KHYS7RDV8zkW_xCZ9l0IBONxa_HOXJHuKSB0gyKuwh0_6qZF5l4DofWPISY6thH9uFHrQ1JAoHT-3E5=s679 1x, https:\/\/blogger.googleusercontent.com\/img\/a\/AVvXsEgp6xhcXjJ2gCLWhFjIspSw3LrrtdxXa9Qf-CgcGRTaOHu8GMeYek65iza3QQQpLNNDok7Gxtf1li-OpO6nH2kgucgE1uIjO8V3poTYjfBk2KHYS7RDV8zkW_xCZ9l0IBONxa_HOXJHuKSB0gyKuwh0_6qZF5l4DofWPISY6thH9uFHrQ1JAoHT-3E5=s679 1.5x"},"classes":[]},{"id":37473,"url":"https:\/\/kalilinuxtutorials.com\/50-essential-linux-commands-for-beginners-and-experts-a-complete-guide\/","url_meta":{"origin":22715,"position":4},"title":"50+ Essential Linux Commands for Beginners and Experts: A Complete Guide","author":"0xSnow","date":"July 25, 2025","format":false,"excerpt":"Introduction Unlock the full potential of your Linux system with this comprehensive guide to essential Linux commands. Whether you\u2019re an experienced administrator or a beginner, mastering these commands is vital for efficient server management, script writing, and troubleshooting. This tutorial will walk you through the most frequently used and powerful\u2026","rel":"","context":"In \"basic linux commands\"","block_context":{"text":"basic linux commands","link":"https:\/\/kalilinuxtutorials.com\/tag\/basic-linux-commands\/"},"img":{"alt_text":"50-Essential-Linux-Commands-for-Beginners-and-Experts-A-Complete-Guide","src":"https:\/\/i0.wp.com\/kalilinuxtutorials.com\/wp-content\/uploads\/2025\/07\/50-Essential-Linux-Commands-for-Beginners-and-Experts-A-Complete-Guide.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/kalilinuxtutorials.com\/wp-content\/uploads\/2025\/07\/50-Essential-Linux-Commands-for-Beginners-and-Experts-A-Complete-Guide.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/kalilinuxtutorials.com\/wp-content\/uploads\/2025\/07\/50-Essential-Linux-Commands-for-Beginners-and-Experts-A-Complete-Guide.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/kalilinuxtutorials.com\/wp-content\/uploads\/2025\/07\/50-Essential-Linux-Commands-for-Beginners-and-Experts-A-Complete-Guide.png?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/kalilinuxtutorials.com\/wp-content\/uploads\/2025\/07\/50-Essential-Linux-Commands-for-Beginners-and-Experts-A-Complete-Guide.png?resize=1050%2C600&ssl=1 3x, https:\/\/i0.wp.com\/kalilinuxtutorials.com\/wp-content\/uploads\/2025\/07\/50-Essential-Linux-Commands-for-Beginners-and-Experts-A-Complete-Guide.png?resize=1400%2C800&ssl=1 4x"},"classes":[]},{"id":28458,"url":"https:\/\/kalilinuxtutorials.com\/sandfly-entropyscan-entropy-scanner-for-linux-to-detect-packed-encrypted-binaries-related-to-malware\/","url_meta":{"origin":22715,"position":5},"title":"Sandfly-Entropyscan : Entropy Scanner For Linux To Detect Packed \/ Encrypted Binaries Related To Malware","author":"R K","date":"February 25, 2023","format":false,"excerpt":"Sandfly-Entropyscan is an Entropy scanner for Linux to detect packed or encrypted binaries related to malware. Finds malicious files and Linux processes and gives output with cryptographic hashes. Sandfly-Entropyscan is a utility to quickly scan files or running processes and report on their entropy (measure of randomness) and if they\u2026","rel":"","context":"In &quot;Kali Linux&quot;","block_context":{"text":"Kali Linux","link":"https:\/\/kalilinuxtutorials.com\/category\/kali\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEiHFoftROls_al2XKB1WYiINrZfyPSsdyOchmkQ91DkxTlbqKA5gfV2p2aWkfmsxFHhaBTeWvhfVByAKCJVuiYRkdiNgMIkeCfShRFroNWhAy35o334ul6m-DBCXmnjCUF7DCANFDfXgqsOpRCPjKZIRqYX4sJim0aTG81vsFeJ-KP1P1tGMg4M7bp3\/s16000\/scan.jpg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEiHFoftROls_al2XKB1WYiINrZfyPSsdyOchmkQ91DkxTlbqKA5gfV2p2aWkfmsxFHhaBTeWvhfVByAKCJVuiYRkdiNgMIkeCfShRFroNWhAy35o334ul6m-DBCXmnjCUF7DCANFDfXgqsOpRCPjKZIRqYX4sJim0aTG81vsFeJ-KP1P1tGMg4M7bp3\/s16000\/scan.jpg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEiHFoftROls_al2XKB1WYiINrZfyPSsdyOchmkQ91DkxTlbqKA5gfV2p2aWkfmsxFHhaBTeWvhfVByAKCJVuiYRkdiNgMIkeCfShRFroNWhAy35o334ul6m-DBCXmnjCUF7DCANFDfXgqsOpRCPjKZIRqYX4sJim0aTG81vsFeJ-KP1P1tGMg4M7bp3\/s16000\/scan.jpg?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEiHFoftROls_al2XKB1WYiINrZfyPSsdyOchmkQ91DkxTlbqKA5gfV2p2aWkfmsxFHhaBTeWvhfVByAKCJVuiYRkdiNgMIkeCfShRFroNWhAy35o334ul6m-DBCXmnjCUF7DCANFDfXgqsOpRCPjKZIRqYX4sJim0aTG81vsFeJ-KP1P1tGMg4M7bp3\/s16000\/scan.jpg?resize=700%2C400&ssl=1 2x"},"classes":[]}],"_links":{"self":[{"href":"https:\/\/kalilinuxtutorials.com\/wp-json\/wp\/v2\/posts\/22715","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kalilinuxtutorials.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kalilinuxtutorials.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kalilinuxtutorials.com\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/kalilinuxtutorials.com\/wp-json\/wp\/v2\/comments?post=22715"}],"version-history":[{"count":6,"href":"https:\/\/kalilinuxtutorials.com\/wp-json\/wp\/v2\/posts\/22715\/revisions"}],"predecessor-version":[{"id":22817,"href":"https:\/\/kalilinuxtutorials.com\/wp-json\/wp\/v2\/posts\/22715\/revisions\/22817"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kalilinuxtutorials.com\/wp-json\/wp\/v2\/media\/22722"}],"wp:attachment":[{"href":"https:\/\/kalilinuxtutorials.com\/wp-json\/wp\/v2\/media?parent=22715"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kalilinuxtutorials.com\/wp-json\/wp\/v2\/categories?post=22715"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kalilinuxtutorials.com\/wp-json\/wp\/v2\/tags?post=22715"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}