A UNIX command that identifies the user account executing the command—often an early command that crackers will run on the system when cracking remotely. In short, the intruder will remotely compromise a service running under a root account, an account set up for a special service, or a user’s account. The hope of crackers is to achieve root access immediately. If this is not achieved, the cracker will need to run a local exploit to elevate his or her privileges.

See Also: Remote Attacks or Exploits or Intrusions.