So I have user 1 and user 2. Interestingly that is something I normally look for when doing forensics at work, but for some reason (or was it location) this completely slipped my mind.
Does our well know green veggie tool do recon for that file normally?
I now have the path for root, I think I’ll leave it until the evening though.