Tracking down a proccess

Is their anyway to track down a proccess by it's command, and see how it got started, and a log of what happened. Because just a minute ago, the user nobody, with the command 'duy' spawned about 15 proccesses, creating the server load to skyrocket. I had to skill -u nobody to get the server back to normal load.

What all would you do to track this down?

Thanks

 

 

 

 

Top