Helpful Linux command-lines: “find /tmp /var/tmp /dev/shm -type f \( -perm -0100 -o -perm -0001 \)” Looks through tmpdirs for files with execute set for self or others—coin miners, install scripts, etc. #log4j