Jun 28 11:38:16 bastion LinuxCommandsWazuh: User ak [19944]:    84  sudo su ubuntu
Jun 28 11:38:16 bastion LinuxCommandsWazuh: User ak [19944]:    85  ls
Jun 28 11:38:24 bastion LinuxCommandsWazuh: User ubuntu [19973]:   546  sudo vi authorized_keys 
Jun 28 11:38:25 bastion LinuxCommandsWazuh: User ubuntu [19973]:   547  cd
Jun 28 11:38:25 bastion LinuxCommandsWazuh: User ubuntu [19973]:   548  ls
Jun 28 11:38:30 bastion LinuxCommandsWazuh: User ubuntu [19973]:   549  cd .ssh/
Jun 28 11:38:30 bastion LinuxCommandsWazuh: User ubuntu [19973]:   550  ls
Jun 28 11:38:53 bastion LinuxCommandsWazuh: User ubuntu [19973]:   551  sudo vi authorized_keys 
Jun 28 11:38:54 bastion LinuxCommandsWazuh: User ubuntu [19973]:   552  cd ..
Jun 28 11:38:54 bastion LinuxCommandsWazuh: User ubuntu [19973]:   553  ls
Jun 28 11:38:55 bastion LinuxCommandsWazuh: User ubuntu [19973]:   554  cd ..
Jun 28 11:38:56 bastion LinuxCommandsWazuh: User ubuntu [19973]:   555  ls
Jun 28 11:50:01 bastion LinuxCommandsWazuh: User ubuntu [19973]:   555  ls
Jun 28 11:50:01 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [19973]:   555  ls]
Jun 28 11:50:06 bastion LinuxCommandsWazuh: User ubuntu [19973]:   556  sudo su devesh/
Jun 28 11:50:07 bastion LinuxCommandsWazuh: User ubuntu [19973]:   557  ls
Jun 28 11:50:11 bastion LinuxCommandsWazuh: User ubuntu [19973]:   558  cd
Jun 28 11:50:16 bastion LinuxCommandsWazuh: User devesh [20140]: 
Jun 28 11:50:23 bastion LinuxCommandsWazuh: User devesh [20140]:     1  redis-cli
Jun 28 11:50:26 bastion LinuxCommandsWazuh: User devesh [20140]:     2  mongosh
Jun 28 11:50:29 bastion LinuxCommandsWazuh: User devesh [20140]:     3  mongo
Jun 28 11:50:59 bastion LinuxCommandsWazuh: User devesh [20140]:     3  mongo
Jun 28 11:51:05 bastion LinuxCommandsWazuh: User devesh [20140]:     4  source ~/.bashrc
Jun 28 11:51:10 bastion LinuxCommandsWazuh: User devesh [20140]:     5  mongo
Jun 28 11:51:15 bastion LinuxCommandsWazuh: User devesh [20140]:     6  psql
Jun 28 11:51:39 bastion LinuxCommandsWazuh: message repeated 3 times: [ User devesh [20140]:     6  psql]
Jun 28 11:51:40 bastion LinuxCommandsWazuh: User ubuntu [19973]:   559  sudo su devesh
Jun 28 11:51:44 bastion LinuxCommandsWazuh: User devesh [20259]:     7  exit
Jun 28 11:51:45 bastion LinuxCommandsWazuh: User devesh [20259]:     8  cd
Jun 28 11:51:46 bastion LinuxCommandsWazuh: User devesh [20259]: ls
Jun 28 11:51:47 bastion LinuxCommandsWazuh: User devesh [20259]:    10  cd .ssh/
Jun 28 11:51:48 bastion LinuxCommandsWazuh: User devesh [20259]:    11  ks
Jun 28 11:51:50 bastion LinuxCommandsWazuh: User devesh [20259]:    12  ls
Jun 28 11:51:51 bastion LinuxCommandsWazuh: User devesh [20259]:    13  cat authorized_keys 
Jun 28 11:52:07 bastion LinuxCommandsWazuh: message repeated 3 times: [ User devesh [20259]:    13  cat authorized_keys ]
Jun 28 11:53:18 bastion LinuxCommandsWazuh: User devesh [20259]:    14  ls
Jun 28 11:53:27 bastion LinuxCommandsWazuh: User devesh [20259]:    15  cat authorized_keys 
Jun 28 12:45:31 bastion LinuxCommandsWazuh: User ubuntu [19973]:   559  sudo su devesh