* list active users ``` who ``` * list processes running by ``` ps -u top -U ``` * look at the entry of the password list ``` sudo awk -F: '// {print $1,$2}' /etc/shadow ``` * lock the account ``` sudo passwd -l ``` * validate lock ``` sudo awk -F: '// {print $1,$2}' /etc/shadow ``` * kill processes ``` sudo pkill -KILL -u ``` * validate process list ``` who ``` * check scheduled cron jobs for ``` sudo ls -lh /var/spool/cron/crontabs/ ``` * delete cron jobs of ``` sudo crontab -r -u ``` * remove print jobs of ``` lprm -U ``` * remove user ``` sudo deluser --remove-home ``` * check that home dir is removed ``` ls /home ``` * check group ``` less /etc/group | grep ```