# Processes, Memory, and the /proc Filesystem

> Master Linux process management and memory analysis. Explore PIDs, the virtual /proc filesystem, and how attackers use ptrace for stealthy process injection.

Canonical: https://codelivly.com/rooms/processes-memory-and-the-proc-filesystem
Last updated: 2026-07-04

| | |
|---|---|
| Level | Beginner |
| Category | Cybersecurity |
| Lessons | 3 |
| Estimated time | 30 min |
| XP | 200 |

Dive into the runtime anatomy of Linux. The Processes, Memory, and the /proc Filesystem module breaks down how Linux executes code, manages memory, and exposes running tasks via the virtual /proc filesystem.

You will learn to monitor process lifecycles, extract hidden data from memory maps, and understand the mechanics of process injection via ptrace. By the end of this module, you will know how to hunt for hidden rootkits, analyze running malware in memory, and detect advanced memory-based evasion techniques used by sophisticated threat actors.

## Lessons

1. Process Lifecycle, States, and Signals (30 min)
2. The Magic of `/proc` (30 min)
3. Process Injection & ptrace (30 min)

## Related

- [Learning path: Linux Fundamentals for Cybersecurity](https://codelivly.com/learning-paths/linux-fundamentals-for-cybersecurity)
- [All rooms](https://codelivly.com/rooms)