Source: http://forensicinsight.org/wp-content/uploads/2013/07/bash-history-forensics.pdf