Home / Labs / Catch the Rogue Processes

Catch the Rogue Processes

The attacker is still inside. Analyze running processes and catch them before they disappear.

Open this lab

Commands practised here

• ps auxLists all running processes with details.
• crontab -lLists cron jobs for the current user.
• ps aux | grep <pattern>Filters processes by command pattern.
• ls -la /proc/<pid>/exeShows the actual binary a process is running.

Nearby labs

• All labsBrowse the full list.
• Exam prepWhich exams these objectives map to.
• Preserve Evidence
• Hunt Rogue Processes