Evidence of execution

Sudo execution history

cat /var/log/auth.log* |grep -i COMMAND|tail

Bash history

cat ~/.bash_history

File access using vim

cat ~/.viminfo