User activity

• cat /etc/passwd - List user accounts.
• w - Show who is logged in and their current processes.
• passd -S [user] - Check password status for user.
• who - List logged-in users
• grep '^sudo:.*$' /etc/group - List sudo users
• cat /home/*/.bash_history - Check user bash history.
• last - Show last logged in users.
• lastlog - Show the most recent logins.