QuestionQ51

Host-Based Analysis

A SOC analyst is investigating an incident involving a Linux system that identifies specific sessions.

Which identifier tracks a currently active program?

Explanation

A process identification number (PID) is the standard Linux identifier for a running process, which is an active instance of a program.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!