echo $HISTFILE
- User command tracking
- May be cleared / tampered
~/.bash_history
commands executed by user (bash shell)
~/.sh_history
Korn shell history
~/.sh_history
Sh history (POSIX sh) - no history by default