{
	"id": "a59dcaff-a703-4838-a50e-d988a60aa514",
	"created_at": "2026-04-06T02:11:37.706318Z",
	"updated_at": "2026-04-10T13:12:46.768147Z",
	"deleted_at": null,
	"sha1_hash": "18593b2623b97e6c68a9ad0e7326bd2e98adcb88",
	"title": "at(1) - Linux man page",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 64639,
	"plain_text": "at(1) - Linux man page\r\nArchived: 2026-04-06 01:55:26 UTC\r\nName\r\nat, batch, atq, atrm - queue, examine or delete jobs for later execution\r\nSynopsis\r\nat [-V] [-q queue] [-f file] [-mldbv] TIME\r\nat [-V] [-q queue] [-f file] [-mldbv] -t time_arg\r\nat -c job [job...]\r\natq [-V] [-q queue]\r\natrm [-V] job [job...]\r\nbatch\r\nDescription\r\nat and batch read commands from standard input or a specified file which are to be executed at a later time.\r\nat\r\nexecutes commands at a specified time.\r\natq\r\nlists the user's pending jobs, unless the user is the superuser; in that case, everybody's jobs are listed. The format\r\nof the output lines (one for each job) is: Job number, date, hour, queue, and username.\r\natrm\r\ndeletes jobs, identified by their job number.\r\nbatch\r\nexecutes commands when system load levels permit; in other words, when the load average drops below 0.8, or\r\nthe value specified in the invocation of atd.\r\nAt allows fairly complex time specifications, extending the POSIX.2 standard. It accepts times of the form\r\nHH:MM to run a job at a specific time of day. (If that time is already past, the next day is assumed.) You may also\r\nspecify midnight, noon, or teatime (4pm) and you can have a time-of-day suffixed with AM or PM for running\r\nin the morning or the evening. You can also say what day the job will be run, by giving a date in the form month-name day with an optional year, or giving a date of the form MMDDYY or MM/DD/YY or DD.MM.YY or\r\nYYYY-MM-DD. The specification of a date must follow the specification of the time of day. You can also give\r\nhttps://linux.die.net/man/1/at\r\nPage 1 of 4\n\ntimes like now + count time-units, where the time-units can be minutes, hours, days, or weeks and you can tell at\r\nto run the job today by suffixing the time with today and to run the job tomorrow by suffixing the time with\r\ntomorrow.\r\nFor example, to run a job at 4pm three days from now, you would do at 4pm + 3 days, to run a job at 10:00am on\r\nJuly 31, you would do at 10am Jul 31 and to run a job at 1am tomorrow, you would do at 1am tomorrow.\r\nThe exact definition of the time specification can be found in /usr/share/doc/at-3.1.10/timespec.\r\nFor both at and batch, commands are read from standard input or the file specified with the -f option and\r\nexecuted. The working directory, the environment (except for the variables TERM, DISPLAY and _) and the\r\numask are retained from the time of invocation. An at - or batch - command invoked from a su(1) shell will retain\r\nthe current userid. The user will be mailed standard error and standard output from his commands, if any. Mail\r\nwill be sent using the command /usr/sbin/sendmail. If at is executed from a su(1) shell, the owner of the login\r\nshell will receive the mail.\r\nThe superuser may use these commands in any case. For other users, permission to use at is determined by the\r\nfiles /etc/at.allow and /etc/at.deny.\r\nIf the file /etc/at.allow exists, only usernames mentioned in it are allowed to use at.\r\nIf /etc/at.allow does not exist, /etc/at.deny is checked, every username not mentioned in it is then allowed to use\r\nat.\r\nIf neither exists, only the superuser is allowed use of at.\r\nAn empty /etc/at.deny means that every user is allowed use these commands, this is the default configuration.\r\nOptions\r\n-V\r\nprints the version number to standard error.\r\n-q queue\r\nuses the specified queue. A queue designation consists of a single letter; valid queue designations range\r\nfrom a to z. and A to Z. The a queue is the default for at and the b queue for batch. Queues with higher\r\nletters run with increased niceness. The special queue \"=\" is reserved for jobs which are currently running.\r\nIf a job is submitted to a queue designated with an uppercase letter, the job is treated as if it were submitted to\r\nbatch at the time of the job. Once the time is reached, the batch processing rules with respect to load average\r\napply. If atq is given a specific queue, it will only show jobs pending in that queue.\r\n-m\r\nSend mail to the user when the job has completed even if there was no output.\r\n-f file\r\nhttps://linux.die.net/man/1/at\r\nPage 2 of 4\n\nReads the job from file rather than standard input.\r\n-l\r\nIs an alias for atq.\r\n-d\r\nIs an alias for atrm.\r\n-v\r\nShows the time the job will be executed before reading the job.\r\nTimes displayed will be in the format \"Thu Feb 20 14:50:00 1997\".\r\n-c\r\ncats the jobs listed on the command line to standard output.\r\n-t time_arg\r\nSubmit the job to be run at the time specified by the time_arg option argument, which must have the same\r\nformat as specified for the touch(1) utility's -t time option argument ([[CC]YY]MMDDhhmm).\r\nEnvironment\r\nSHELL\r\nThe value of the SHELL environment variable at the time of at invocation will determine which shell is used to\r\nexecute the at job commands. If SHELL is unset when at is invoked, the user's login shell will be used; otherwise,\r\nif SHELL is set when at is invoked, it must contain the path of a shell interpreter executable that will be used to\r\nrun the commands at the specified time.\r\nat will record the values of environment variables present at time of at invocation. When the commands are run at\r\nthe specified time, at will restore these variables to their recorded values . These variables are excluded from this\r\nprocessing and are never set by at when the commands are run :\r\nTERM, DISPLAY, SHELLOPTS, _, PPID, BASH_VERSINFO, EUID, UID, GROUPS.\r\nIf the user submitting the at job is not the super-user, variables that alter the behaviour of the loader ld.so(8), such\r\nas LD_LIBRARY_PATH , cannot be recorded and restored by at .\r\nFiles\r\n/var/spool/at\r\n/var/spool/at/spool\r\n/proc/loadavg\r\n/var/run/utmp\r\n/etc/at.allow\r\n/etc/at.deny\r\nhttps://linux.die.net/man/1/at\r\nPage 3 of 4\n\nSee Also\r\ncron(1), nice(1), sh(1), umask(2), atd(8).\r\nBugs\r\nThe correct operation of batch for Linux depends on the presence of a proc- type directory mounted on /proc.\r\nIf the file /var/run/utmp is not available or corrupted, or if the user is not logged on at the time at is invoked, the\r\nmail is sent to the userid found in the environment variable LOGNAME. If that is undefined or empty, the current\r\nuserid is assumed.\r\nAt and batch as presently implemented are not suitable when users are competing for resources. If this is the case\r\nfor your site, you might want to consider another batch system, such as nqs.\r\nAuthor\r\nAt was mostly written by Thomas Koenig, ig25@rz.uni-karlsruhe.de.\r\nReferenced By\r\nat.deny(5), atrun(8), calendar(1), csh(1), faxalter(1), hier(7), hylafax-client(1), lftp(1), passwd(5),\r\nrrdfetch(1), salt(7), sendfax(1), sendpage(1)\r\nSource: https://linux.die.net/man/1/at\r\nhttps://linux.die.net/man/1/at\r\nPage 4 of 4",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://linux.die.net/man/1/at"
	],
	"report_names": [
		"at"
	],
	"threat_actors": [
		{
			"id": "eb3f4e4d-2573-494d-9739-1be5141cf7b2",
			"created_at": "2022-10-25T16:07:24.471018Z",
			"updated_at": "2026-04-10T02:00:05.002374Z",
			"deleted_at": null,
			"main_name": "Cron",
			"aliases": [],
			"source_name": "ETDA:Cron",
			"tools": [
				"Catelites",
				"Catelites Bot",
				"CronBot",
				"TinyZBot"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775441497,
	"ts_updated_at": 1775826766,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/18593b2623b97e6c68a9ad0e7326bd2e98adcb88.pdf",
		"text": "https://archive.orkl.eu/18593b2623b97e6c68a9ad0e7326bd2e98adcb88.txt",
		"img": "https://archive.orkl.eu/18593b2623b97e6c68a9ad0e7326bd2e98adcb88.jpg"
	}
}