Bash history is the command log maintained by the Bash shell, usually in a file such as ~/.bash_history. It records commands a user typed in interactive sessions, which can expose filenames, admin actions, scripts, network targets, and sometimes secrets entered directly on the command line.
In cyber security, bash history matters because it can reveal how an operator moved through a system, what tools were used, and which paths or hosts were touched. Attackers may inspect or delete it to hide their activity, while defenders use it to reconstruct timelines, identify persistence, and spot exposed credentials or reconnaissance commands. In a staging or compromise environment, leaked bash history can provide high-value forensic evidence and help map the operator’s workflow.