Every command ReflexSec uses, with the explanation behind the call. No timer — read at your own pace.
sudo lsof -i -P -n | grep LISTEN
defaults read com.apple.finder AppleShowAllFiles
security find-generic-password -s "ci-build-token" -w
xattr -dr com.apple.quarantine ~/Downloads/Installer.app