Keep an eye on pro­cesses

Vir­tu­ally all ma­li­cious ac­tiv­ity hap­pens via pro­cesses run­ning in the back­ground.

APC Australia - - How To » Linux -

As part of your ac­tive se­cu­rity man­age­ment plan, you should keep an eye on the run­ning pro­cesses on your ma­chine and im­me­di­ately take ac­tion against any sus­pi­cious pro­cesses. You can use the top com­mand to list all the run­ning pro­cesses and high­light how they’re con­sum­ing the avail­able re­sources on your com­puter. If you want a more user-friendly ver­sion of the run­ning pro­cesses, in­stall the htop util­ity from the re­pos.

Ev­ery process is as­signed a process ID, or PID, which helps iden­tify and keep track of in­di­vid­ual pro­cesses. Use the pgrep com­mand to list the PID if a process, such as pgrep vlc . To kill a process you can use the kill com­mand fol­lowed by the PID (Process ID) of the un­recog­nised pro­gram.

For ex­am­ple, will in­struct the Linux ker­nel to shut down the kill -9 1934 pro­gram as­so­ci­ated with the spec­i­fied PID. You can also kill a process from within the top util­ity. Press K and then type the PID of the process to ter­mi­nate it.

Newspapers in English

Newspapers from Australia

© PressReader. All rights reserved.