- check the security of our system
- whether there was any unauthoried accesss happended recenly
- last login of user i.e log of recent user logins
- log of commands ran as sudo
- any open ports :nmap
- recently installed sofwares (by dpkg -i or sudo apt install)
- recently connected wifi details
- last run 10 commands