We give you access to a Linux server that runs a program. You don't know anything about this program. How do you figure it out.
Sigiloso
I explained how I find which programs are running (using ps options) and which ports are listening (using netstat). Then showed how I can find the program that I'm looking for (after putting aside system processes, drawing the process tree, etc.). Then how I can analyze the program IO with tcpdump and lsof.