find -mtime

Find files modified within a time window

find -mtime -7 finds files modified in the last 7 days. -mtime +30 finds files not modified in over 30 days. Use during incident response to find which config files changed recently.

Example

$ find /etc -mtime -1 2>/dev/null
/etc/nginx/sites-enabled/app

Tip: Type it yourself in the terminal below - reading is not the same as doing.