> Зонды от АНБ на месте:
> https://packages.altlinux.org/en/p10/srpms/systemd/

Хорошая попытка, агент Смит, но растоманы всё испортили:

moonwalk is a 400 KB single-binary executable that can clear your traces while penetration testing a Unix machine. It saves the state of system logs pre-exploitation and reverts that state including the filesystem timestamps post-exploitation leaving zero traces of a ghost in the shell.

/// A list of all the common logging files in a UNIX machine
pub static LOG_FILES: [&str; 23] = [
    "~/.bash_history",
    "~/.zsh_history",
    "~/Library/Logs/DiagnosticReports",
    "~/Library/Logs",
    "/var/log/messages",
    "/var/log/auth.log",
    "/var/log/kern.log",
    "/var/log/cron.log",
    "/var/log/maillog",
    "/var/log/boot.log",
    "/var/log/mysqld.log",
    "/var/log/qmail",
    "/var/log/httpd",
    "/var/log/lighttpd",
    "/var/log/secure",
    "/var/log/utmp",
    "/var/log/lastlog",
    "/var/log/wtmp",
    "/var/log/yum.log",
    "/var/log/system.log",
    "/var/log/DiagnosticMessages",
    "Library/Logs",
    "Library/Logs/DiagnosticReports"
]; // Thanks https://github.com/sundowndev/covermyass

https://github.com/mufeedvh/moonwalk