Some valuable information may be obtained using commands
ps and
lsof. For example
Code:
ps -eO user -H #or
ps axjf
shows the process tree. The information here is highly customizable by the amount of options provided by ps. You can discover the parent-child processes relationship. If you have a defunct process, you can establish who is the parent and then the open files, by its Process ID:
Hope this will help a little.