Jul 10 06:20:17 bastion LinuxCommandsWazuh: User rihan [139588]: 24 mongo pixel_v1 Jul 10 06:24:35 bastion LinuxCommandsWazuh: User rihan [139588]: 24 mongo pixel_v1 Jul 10 07:48:32 bastion LinuxCommandsWazuh: User ubuntu [140194]: 573 htop Jul 10 07:48:33 bastion LinuxCommandsWazuh: User ubuntu [140194]: 574 ls Jul 10 07:48:35 bastion LinuxCommandsWazuh: User ubuntu [140194]: 575 sudo su anshika Jul 10 07:49:41 bastion LinuxCommandsWazuh: User ubuntu [140194]: 575 sudo su anshika Jul 10 07:49:41 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [140194]: 575 sudo su anshika] Jul 10 07:49:43 bastion LinuxCommandsWazuh: User ubuntu [140194]: 576 cd .. Jul 10 07:49:44 bastion LinuxCommandsWazuh: User ubuntu [140194]: 577 ls Jul 10 07:49:47 bastion LinuxCommandsWazuh: User anshika [140339]: Jul 10 07:49:49 bastion LinuxCommandsWazuh: User anshika [140339]: 1 cd Jul 10 07:50:10 bastion LinuxCommandsWazuh: User anshika [140339]: 1 cd Jul 10 07:50:19 bastion LinuxCommandsWazuh: User anshika [140339]: 2 source ~/.bashrc Jul 10 07:50:21 bastion LinuxCommandsWazuh: User ubuntu [140194]: 578 sudo su anshika Jul 10 08:01:05 bastion LinuxCommandsWazuh: User anshika [140533]: 3 exit Jul 10 08:17:44 bastion LinuxCommandsWazuh: User anshika [140533]: 4 mongo Jul 10 08:38:12 bastion LinuxCommandsWazuh: User ubuntu [140827]: 579 exit Jul 10 08:38:16 bastion LinuxCommandsWazuh: User ubuntu [140827]: 580 sudo su venky Jul 10 08:38:51 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [140827]: 580 sudo su venky] Jul 10 08:38:55 bastion LinuxCommandsWazuh: User venky [140952]: Jul 10 08:38:56 bastion LinuxCommandsWazuh: User venky [140952]: 1 cd Jul 10 08:39:13 bastion LinuxCommandsWazuh: User anshika [140533]: 4 mongo Jul 10 08:39:17 bastion LinuxCommandsWazuh: User venky [140952]: 2 sudo vi ~/.bashrc Jul 10 08:39:22 bastion LinuxCommandsWazuh: User venky [140952]: 3 source ~/.bashrc Jul 10 08:39:59 bastion LinuxCommandsWazuh: User venky [140952]: 4 sudo setfacl -m u:venky:0 /home/ubuntu Jul 10 08:40:05 bastion LinuxCommandsWazuh: User anshika [140533]: 5 psql Jul 10 08:40:10 bastion LinuxCommandsWazuh: User venky [140952]: 5 sudo apt install setfcal Jul 10 08:40:19 bastion LinuxCommandsWazuh: User anshika [140533]: 6 psql -c aishopper_v2 Jul 10 08:40:43 bastion LinuxCommandsWazuh: User venky [140952]: 6 sudo apt install acl Jul 10 08:40:44 bastion LinuxCommandsWazuh: User venky [140952]: 6 sudo apt install acl Jul 10 08:40:46 bastion LinuxCommandsWazuh: User venky [140952]: 7 sudo setfacl -m u:venky:0 /home/ubuntu Jul 10 08:40:48 bastion LinuxCommandsWazuh: User ubuntu [140827]: 580 sudo su venky Jul 10 08:41:37 bastion LinuxCommandsWazuh: User venky [141370]: 8 exit Jul 10 08:43:54 bastion LinuxCommandsWazuh: User anshika [140533]: 6 psql -c aishopper_v2 Jul 10 08:43:57 bastion LinuxCommandsWazuh: User anshika [140533]: 7 exit Jul 10 08:44:56 bastion LinuxCommandsWazuh: User anshika [140533]: 8 psql -c aishopper_v1 Jul 10 08:45:12 bastion LinuxCommandsWazuh: User anshika [140533]: 8 psql -c aishopper_v1 Jul 10 08:48:49 bastion LinuxCommandsWazuh: User anshika [140533]: psql Jul 10 09:02:04 bastion LinuxCommandsWazuh: User anshika [140533]: psql Jul 10 09:02:25 bastion LinuxCommandsWazuh: User anshika [140533]: 10 vi ./bashrc Jul 10 09:02:34 bastion LinuxCommandsWazuh: User anshika [140533]: 11 echo $psql Jul 10 09:02:37 bastion LinuxCommandsWazuh: User anshika [140533]: 12 $psql Jul 10 09:04:07 bastion LinuxCommandsWazuh: User ubuntu [141729]: 581 exit Jul 10 09:04:33 bastion LinuxCommandsWazuh: User ubuntu [141729]: 582 psql -h 10.53.208.3 -d aishopper_v1 -U postgress Jul 10 09:25:39 bastion LinuxCommandsWazuh: User venky [141950]: mongo Jul 10 09:54:14 bastion LinuxCommandsWazuh: User venky [141950]: mongo Jul 10 10:14:11 bastion LinuxCommandsWazuh: User anshika [142306]: 13 psql Jul 10 10:22:29 bastion LinuxCommandsWazuh: User anshika [142306]: 14 psql Jul 10 10:23:03 bastion LinuxCommandsWazuh: User ubuntu [142478]: 583 psql -h 10.53.208.3 -d aishopper_v1 -U postgres Jul 10 10:23:14 bastion LinuxCommandsWazuh: User anshika [142499]: 15 exit Jul 10 10:23:15 bastion LinuxCommandsWazuh: User anshika [142499]: 16 cd Jul 10 10:23:17 bastion LinuxCommandsWazuh: User anshika [142499]: 17 cd .ssh/ Jul 10 10:23:17 bastion LinuxCommandsWazuh: User anshika [142499]: 18 ls Jul 10 10:23:25 bastion LinuxCommandsWazuh: User anshika [142499]: 19 sudo vi authorized_keys Jul 10 10:23:28 bastion LinuxCommandsWazuh: User ubuntu [142478]: 584 sudo su anshika Jul 10 11:22:00 bastion LinuxCommandsWazuh: User ubuntu [142971]: 584 sudo su anshika Jul 10 11:22:04 bastion LinuxCommandsWazuh: User ubuntu [142971]: 585 cd .. Jul 10 11:22:05 bastion LinuxCommandsWazuh: User ubuntu [142971]: 586 ls Jul 10 11:22:15 bastion LinuxCommandsWazuh: User ubuntu [142971]: 587 sudo su shobhit/ Jul 10 11:22:16 bastion LinuxCommandsWazuh: User shobhit [143024]: 12 mongo Jul 10 11:22:20 bastion LinuxCommandsWazuh: User shobhit [143024]: 13 cd Jul 10 11:22:21 bastion LinuxCommandsWazuh: User shobhit [143024]: 14 cd .ssh/ Jul 10 11:22:21 bastion LinuxCommandsWazuh: User shobhit [143024]: 15 ls Jul 10 11:22:24 bastion LinuxCommandsWazuh: User shobhit [143024]: 16 cat au Jul 10 11:22:32 bastion LinuxCommandsWazuh: User shobhit [143024]: 17 ls Jul 10 11:23:58 bastion LinuxCommandsWazuh: User shobhit [143024]: 17 ls Jul 10 11:23:58 bastion LinuxCommandsWazuh: message repeated 3 times: [ User shobhit [143024]: 17 ls] Jul 10 11:23:59 bastion LinuxCommandsWazuh: User shobhit [143024]: 18 cd Jul 10 11:24:00 bastion LinuxCommandsWazuh: User shobhit [143024]: 19 ls Jul 10 11:24:01 bastion LinuxCommandsWazuh: User shobhit [143024]: 20 cd .ssh/ Jul 10 11:24:02 bastion LinuxCommandsWazuh: User shobhit [143024]: 21 ;s Jul 10 11:24:03 bastion LinuxCommandsWazuh: User shobhit [143024]: 22 ls Jul 10 11:24:04 bastion LinuxCommandsWazuh: User shobhit [143024]: 23 cat authorized_keys Jul 10 11:24:10 bastion LinuxCommandsWazuh: User shobhit [143024]: 24 psql Jul 10 11:24:53 bastion LinuxCommandsWazuh: User shobhit [143024]: 25 cd Jul 10 11:24:54 bastion LinuxCommandsWazuh: User shobhit [143024]: 26 ls Jul 10 11:24:57 bastion LinuxCommandsWazuh: User shobhit [143271]: 12 mongo Jul 10 11:24:59 bastion LinuxCommandsWazuh: User ubuntu [142971]: 588 sudo su shobhit Jul 10 11:25:00 bastion LinuxCommandsWazuh: User ubuntu [142971]: 589 ls Jul 10 11:25:10 bastion LinuxCommandsWazuh: User shobhit [143271]: 13 make psql Jul 10 11:25:17 bastion LinuxCommandsWazuh: User shobhit [143271]: 14 docker ps Jul 10 11:25:35 bastion LinuxCommandsWazuh: User shobhit [143271]: 15 psql Jul 10 11:25:39 bastion LinuxCommandsWazuh: User shobhit [143271]: 16 mongosh Jul 10 11:25:58 bastion LinuxCommandsWazuh: User shobhit [143271]: 17 ls Jul 10 11:25:59 bastion LinuxCommandsWazuh: User shobhit [143271]: 17 ls Jul 10 11:26:04 bastion LinuxCommandsWazuh: User shobhit [143440]: 32 ls Jul 10 11:26:05 bastion LinuxCommandsWazuh: User shobhit [143440]: 32 ls Jul 10 11:26:22 bastion LinuxCommandsWazuh: User shobhit [143440]: 33 ll Jul 10 11:26:58 bastion LinuxCommandsWazuh: User shobhit [143440]: 34 mongo Jul 10 11:27:03 bastion LinuxCommandsWazuh: User shobhit [143440]: 35 mongosh datalake Jul 10 11:29:00 bastion LinuxCommandsWazuh: User ubuntu [142971]: 589 ls Jul 10 11:29:01 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [142971]: 589 ls] Jul 10 11:29:03 bastion LinuxCommandsWazuh: User ubuntu [142971]: 590 cd Jul 10 11:29:03 bastion LinuxCommandsWazuh: User ubuntu [142971]: 591 ls Jul 10 11:29:19 bastion LinuxCommandsWazuh: User devesh [143570]: 21 mongo datalake Jul 10 11:29:20 bastion LinuxCommandsWazuh: User devesh [143570]: 22 cd Jul 10 11:29:23 bastion LinuxCommandsWazuh: User devesh [143570]: 23 cd .ssh/ Jul 10 11:29:23 bastion LinuxCommandsWazuh: User devesh [143570]: 24 ls Jul 10 11:29:34 bastion LinuxCommandsWazuh: User devesh [143570]: 25 sudo vi authorized_keys Jul 10 11:33:37 bastion LinuxCommandsWazuh: User devesh [143570]: 26 cd Jul 10 11:33:40 bastion LinuxCommandsWazuh: User ubuntu [142971]: 592 sudo su devesh Jul 10 11:33:45 bastion LinuxCommandsWazuh: User shobhit [143650]: 32 ls Jul 10 11:33:46 bastion LinuxCommandsWazuh: User shobhit [143650]: 33 cd Jul 10 11:33:47 bastion LinuxCommandsWazuh: User shobhit [143650]: 34 cd .sss Jul 10 11:33:51 bastion LinuxCommandsWazuh: User shobhit [143650]: 35 cd .ssh Jul 10 11:33:57 bastion LinuxCommandsWazuh: User shobhit [143650]: 36 sudo vi authorized_keys Jul 10 11:33:58 bastion LinuxCommandsWazuh: User shobhit [143650]: 37 cd Jul 10 11:33:58 bastion LinuxCommandsWazuh: User shobhit [143650]: 38 ls Jul 10 11:34:03 bastion LinuxCommandsWazuh: User ubuntu [142971]: 593 sudo su shobhit Jul 10 11:34:03 bastion LinuxCommandsWazuh: User ubuntu [142971]: 594 ls Jul 10 11:34:07 bastion LinuxCommandsWazuh: User ubuntu [142971]: 595 cd Jul 10 11:34:07 bastion LinuxCommandsWazuh: User ubuntu [142971]: 596 ls Jul 10 11:34:09 bastion LinuxCommandsWazuh: User ubuntu [142971]: 597 cd bin Jul 10 11:34:10 bastion LinuxCommandsWazuh: User ubuntu [142971]: 598 ls Jul 10 11:35:47 bastion LinuxCommandsWazuh: User shobhit [143440]: 36 mongo datalake Jul 10 11:45:28 bastion LinuxCommandsWazuh: User ubuntu [142971]: 598 ls Jul 10 11:45:29 bastion LinuxCommandsWazuh: message repeated 7 times: [ User ubuntu [142971]: 598 ls] Jul 10 11:45:30 bastion LinuxCommandsWazuh: User ubuntu [142971]: 599 cd .. Jul 10 11:45:32 bastion LinuxCommandsWazuh: User ubuntu [142971]: 600 ls Jul 10 11:45:33 bastion LinuxCommandsWazuh: User ubuntu [142971]: 601 cd Jul 10 11:45:33 bastion LinuxCommandsWazuh: User ubuntu [142971]: 602 ls Jul 10 11:45:37 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [142971]: 602 ls] Jul 10 11:53:55 bastion LinuxCommandsWazuh: User ubuntu [142971]: 602 ls Jul 10 11:53:55 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [142971]: 602 ls] Jul 10 11:56:21 bastion LinuxCommandsWazuh: User ubuntu [142971]: 602 ls Jul 10 11:56:22 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ubuntu [142971]: 602 ls] Jul 10 11:56:23 bastion LinuxCommandsWazuh: User ubuntu [142971]: 603 cd Jul 10 11:56:23 bastion LinuxCommandsWazuh: User ubuntu [142971]: 604 ls Jul 10 11:56:24 bastion LinuxCommandsWazuh: User ubuntu [142971]: 605 cd .. Jul 10 11:56:25 bastion LinuxCommandsWazuh: User ubuntu [142971]: 606 ls Jul 10 11:56:26 bastion LinuxCommandsWazuh: User ubuntu [142971]: 607 cd .. Jul 10 11:56:27 bastion LinuxCommandsWazuh: User ubuntu [142971]: 608 cd Jul 10 11:56:27 bastion LinuxCommandsWazuh: User ubuntu [142971]: 609 ls