The tip of the day is to use the find command with some arguments to find the last changed files on a Linux system. This command is always useful to check, for example, what was changed on a system before abnormal behavior, or in case of hacking a server.
Here is the command in question. Here we exclude the /dev and /sys and it indicates that you want only files modified in the last 60 minutes:
~# find / -not -path ‘/sys*’ -not -path ‘/dev*’ -not -path ‘/proc*’ -mmin -60