Detect unix shell configuration modification. Adversaries may establish persistence through executing malicious commands triggered when a new shell is opened.