Hey, glad you learnt lot from my writeup !

and for the cron is somehow a root cronjob so normal users won’t able to see it but using the tool pspy it show you what happening in process even if they were happening by the root :D . And for checking for it manually I think once you got the root type crontab -l in the shell :) . good luck and feel free to ask me about my other writeups.