Checks the .bash history file of every user for a certain command (such as . 'cat /etc/passwd' or 'su -').