Check Cron Jobs
privesclinuxchecklist
Summary
Writable scripts run by root cron jobs are an easy escalation path.
Walkthrough
Enumerate cron jobs and use pspy to catch scheduled tasks running as root.
Commands
bash
ls -lah /etc/cron* crontab -l
Watch processes live if the cron target is unclear
bash
./pspy64 -pf -i 1000