Check the crontabs Running on the Machine

Crontabs provides a way to run programs automatically on the server. This is a great way to automate programs but often crackers will use the crontab file to run their own programs so this needs to be checked.

The root crontab listing can be checked with this command:

crontab -e

This actually allows an edit of the crontab listing.
Typically the crontab files are located at /var/spool/cron.