Jul  3 12:18:24 bastion LinuxCommandsWazuh: User ubuntu [80033]:   568  sudo su shobhit
Jul  3 12:18:29 bastion LinuxCommandsWazuh: User devesh [80057]:    15  cat authorized_keys 
Jul  3 12:18:30 bastion LinuxCommandsWazuh: User devesh [80057]:    16  cd
Jul  3 12:18:34 bastion LinuxCommandsWazuh: User devesh [80057]:    17  psql
Jul  3 12:23:10 bastion LinuxCommandsWazuh: User devesh [80057]:    18  cd .ssh/
Jul  3 12:23:32 bastion LinuxCommandsWazuh: User devesh [80057]:    19  sudo vi authorized_keys 
Jul  3 12:23:42 bastion LinuxCommandsWazuh: User devesh [80235]:    15  cat authorized_keys 
Jul  3 12:24:17 bastion LinuxCommandsWazuh: User devesh [80235]:    16  mongo
Jul  3 12:57:09 bastion LinuxCommandsWazuh: User rihan [80498]:    16  mongo
Jul  3 12:57:12 bastion LinuxCommandsWazuh: User rihan [80498]:    16  mongo
Jul  3 12:57:17 bastion LinuxCommandsWazuh: User ubuntu [80601]:   569  sudo su devesh