Home / Labs / Hunt Rogue Processes

Hunt Rogue Processes

Root for 5 hours. Read the process list and spot what does not belong.

Open this lab

Commands practised here

• cat /evidence/ps-full.txtShows the full process snapshot.
• cat /evidence/ps-analysis.txtShows the attacker process analysis.
• grep '95' /evidence/ps-full.txtFinds the high-CPU process.
• kill -9 <PID>Kills a rogue process (use after identifying PIDs).

Nearby labs

• All labsBrowse the full list.
• Exam prepWhich exams these objectives map to.
• Catch the Rogue Processes
• Discover Open Services