Skip to main content

walk_crontab_entries

Function walk_crontab_entries 

Source
pub fn walk_crontab_entries<P: PhysicalMemoryProvider>(
    reader: &ObjectReader<P>,
) -> Result<Vec<CrontabEntry>>
Expand description

Walk all cron-related processes and recover crontab entries from memory.

Finds processes with comm matching known cron daemon names, then scans their readable anonymous VMAs for lines matching crontab format (five time fields followed by a command).