operator@provoc:~$ sudo find / -perm -4000 -type f 2>/dev/null
_

What does this find command do?

• 1Lists files larger than 4000 bytes
• 2Lists files with the SUID bit set — useful for privilege-escalation triage
• 3Lists files with exactly mode 4000
• 4Lists files modified in the last 4000 minutes