Watch the shell commands being executed actively. This beacon requires strace.
salt.beacons.sh.
beacon
Scan the shell execve routines. This beacon will convert all login shells
beacons: sh: {}
Docs for previous releases are available on readthedocs.org.
Latest Salt release: 2016.11.1
salt.beacons.service
salt.beacons.status module