148 䡲 Cyber Forensics Field Manual, Second Edition
For incoming connections, the operating system typically indicates which resources are
being used, such as fi le shares and printers. Most operating systems can also provide a list of
the ports and IP addresses at which the system is listening for connections.
Running Processes—Processes are the programs that are currently executing on a computer.
Processes include services off ered by the operating system and applications run by adminis-
trators and users. Most operating systems off er ways to view a list of the currently running
processes. is list can be studied to determine the services that are active on the system, such
as a Web server, and the programs that individual users are runni ...