Another fun Linux command line:
"sudo ls -l /proc/[0-9]*/exe 2>/dev/null | awk '/ -> / && !/\/usr\/(lib(exec)?|s?bin)\// {print $9, $10, $11}' | sed 's,/proc/\([0-9]*\)/exe,\1,'"
Display PIDs with non-standard EXE paths
Or just try:
"ls -l /proc/[0-9]*/exe 2>/dev/null | awk '/ -> / {print $NF}' | sort"
Shows all EXE paths in sorted order making it easier to spot outliers #log4j
