- utmp, wtmp, and lastlog files are the main accounting files in Unix Written in special binary format
- Can be edited using tools such as remove, wtmped, marry, cloak, logwedit, wzap, and zapper http://ftp.technotronic.com/unix/log-tools
- Tools included in RootKits