Processes and systemd

When a user on a Linux system runs a program, the program is run in a process. Processes run in user-mode, which is distinct from kernel-mode. The kernel provides resources and scheduling for the processes, but the kernel itself is not a process. Administrators can search and manage the properties of running processes using command line tools like ps as well as by directly examining the /proc directory. The first process started on many Linux systems is systemd. Cyber operations professionals need to know how systemd units and services are managed.