For system administrators and security researchers, here is a breakdown of the process's typical behavior:
