5. Describe your investigation process if a backdoor file has been implanted on a Windows or Linux system.

• Check system logs
• Examine system users for anomalies
• Inspect abnormal and hidden processes
• Examine abnormal system files and check file integrity
• Inspect network connections
• Review scheduled tasks and services
• Scan for backdoors