I can confirm that some cron jobs indeed use find. For example, see /etc/cron.daily/suse.de-clean-tmp and /etc/cron.daily/suse.de-clean-vi.

But the questions remain -- even if it is those jobs that are running, do they run as user 'nobody'? And even then, they are supposed to run only at some time early in the morning. Why do they run often?

Now, that said, I know my laptop indeed appears to run a few processes immediately after startup. I haven't checked to see what they are. But 1) they run for the first few seconds, 2) don't slow it down by much, and 3) never run again, at least not so visibly.

So, I'll say if these things run only once immediately after login, they are probably not harmful. If they run every now and then, something's very likely amiss
:unsure: Unless you are running some server that does this without knowing it.