ThiefQuest invokes "time" call to check the system's time, executes a "sleep" command, invokes a second "time" call, and then compares the time difference between the two "time" calls and the amount of time the system slept to identify the sandbox.