process-accounting is a system monitoring and logging process which monitors and tracks the system resource usage and allocation to users. process-accounting performs system monitoring and tracking user commands. Using acct or pacct file, the intrusion can be detected to the point of entry. Process accounting refers to keeping record of the every command that is run on linux, the user executing the command, the user ID and group ID, the CPU time the system resource usage.