Daniel Roberson
  • Posts
  • About
  • Notes
  • Projects
  • Time
  • Posts
    About
    Notes
    Projects
    Time

process

0001-01-01

In an operating systems context, a process is a program, application, or command that is being actively executed.


Links to this note

  • command-line detection
  • armouringtheelf-grugq_scut2001
  • address space
  • process image
  • SIGTRAP
  • EGID
  • EUID
  • prctl
  • Linux Persistence: Processes
  • orphan process
  • process lineage
  • thread injection
  • unhide
  • lsof
  • /proc/PID/maps
  • /proc/PID/stack
  • /proc/PID/status
  • auditinglinuxprocessesdeepdive-boelen2025
  • fork
  • TracerPid
  • shelling out
  • taskverse
  • interprocess communication
  • parent process
  • process masquerading
  • ps command
  • pid
  • PID file
  • linuxplus-breshahan2015
  • /proc/PID/cmdline
  • /proc/PID/exe
  • /proc/PID/syscall
  • command line
  • CreateProcess
  • CreateProcessA
  • CWD
  • DLL injection
  • enumerate processes
  • environ file
  • init process
  • libprocesshider
  • NtCreateProcess
  • pipeline
  • proc/PID/fd
  • proc/PID/fdinfo
  • Process Explorer
  • process hiding
  • process logging
  • PTRACE_SYSCALL
  • signal (operating systems)
  • Task Manager
  • top command

Recent Posts

Linux Persistence: Modular Software

2025-04-17 DFIR CTF persistence linux persistence apache asterisk

Linux Persistence: Web Shells

2025-04-16 DFIR persistence webshell linux persistence webshell apache nginx PHP

Linux Persistence: Rootkits

2025-04-15 DFIR persistence rootkit LKM linux persistence LKM rootkit LD_PRELOAD kprobe ftrace ld.so hooking

Linux Persistence: Processes

2025-04-11 DFIR persistence processes linux persistence processes

Defanging Linux LKM Rootkits With cleanup_module()

2025-04-05 Linux LKM rootkits EDR hooks incident response Linux LKM rootkit


Home

About

Notes

Projects

Time

© All rights reserved. Powered by Hugo and Erblog.