8. Find and understand every process

If at all possible, use statically-linked tools and utilities mounted from a CD-R for this investigation.

There are two or three easy ways to do this:

• use the standard utility ps auxww or ps -ef;
• use lsof
• if you /proc filesystem is up to it (e.g., as on Linux) try something like this:

          for J in 1 2 3 4 5 6 7 8 9; do ls -d  /proc/$J* | sort ; done > /tmp/proclist
          for I in `cat /tmp/proclist`; do cat $I/cmdline && echo "" ; done