Tracks

/var/log - Location of kernel and software logs
shred -vzfu auth.log -read manual, tool that overrites file many times causing data to be unrecoverable
.bash_history - do not forget this bro