Ls Filedot 2021 [Real]

ls -la ... (Yes, three dots as an argument to ls is valid and terrifying for new admins.) FileDot 2021 sometimes used hard links to hide processes. Use:

ls -la --time-style=long-iso | grep "2021" | grep -i filedot This isolates timestamps from the year 2021 and filters for the term. One signature of FileDot 2021 was a hidden directory named ... (three dots). To see it: ls filedot 2021

ls -la | grep "^\.\.\." Or list it directly: ls -la