Linux Process Analysis

Walkthrough summary

Linux Process Analysis TryHackMe walkthrough with 12 answered prompts and lab methodology notes.

Sample prompts covered

• After updating the PATH and LD_LIBRARY_PATH environment variables, run the command check-env. What is the flag that is returned in the output?
  Open the walkthrough page to inspect the full answer and command flow.
• Which command lists all open files and the processes that opened them?
  Open the walkthrough page to inspect the full answer and command flow.
• Use pstree to list out the process hierarchies. What is the name of the nc processes parent?
  Open the walkthrough page to inspect the full answer and command flow.
• Search around the system for suspicious system-level cronjob entries. What is the full URL of the C2 server?
  Open the walkthrough page to inspect the full answer and command flow.
• List the user-level cronjobs in the system. What is the hidden flag in one of the scripts?
  Open the walkthrough page to inspect the full answer and command flow.