Jul 12 08:30:05 bastion LinuxCommandsWazuh: User ubuntu [160197]:   610  exit
Jul 12 08:30:07 bastion LinuxCommandsWazuh: User rihan [160218]:    24  mongo pixel_v1
Jul 12 08:30:08 bastion LinuxCommandsWazuh: User rihan [160218]:    25  cd
Jul 12 08:30:09 bastion LinuxCommandsWazuh: User rihan [160218]:    26  ls
Jul 12 08:30:12 bastion LinuxCommandsWazuh: User rihan [160218]:    27  cd .ssh/
Jul 12 08:30:12 bastion LinuxCommandsWazuh: User rihan [160218]:    28  ls
Jul 12 08:30:42 bastion LinuxCommandsWazuh: User rihan [160218]:    29  sudo vi authorized_keys 
Jul 12 08:30:46 bastion LinuxCommandsWazuh: User rihan [160351]:    24  mongo pixel_v1
Jul 12 08:30:57 bastion LinuxCommandsWazuh: User rihan [160351]:    25  redis-cli
Jul 12 08:31:24 bastion LinuxCommandsWazuh: User rihan [160456]:    25  redis-cli
Jul 12 08:32:16 bastion LinuxCommandsWazuh: User rihan [160456]:    25  redis-cli
Jul 12 08:32:48 bastion LinuxCommandsWazuh: User rihan [160456]:    26  redis
Jul 12 08:33:07 bastion LinuxCommandsWazuh: User rihan [160567]:    27  select 1
Jul 12 09:49:09 bastion LinuxCommandsWazuh: User rihan [160567]:    28  redis
Jul 12 09:49:15 bastion LinuxCommandsWazuh: User rihan [160567]:    28  redis
Jul 12 10:12:24 bastion LinuxCommandsWazuh: User rihan [161199]:    32  sudo vi authorized_keys 
Jul 12 10:12:54 bastion LinuxCommandsWazuh: User rihan [161199]:    33  vim ~/.bashrc 
Jul 12 10:13:02 bastion LinuxCommandsWazuh: User rihan [161199]:    34  redis KEYS "hello_test" | xargs DEL
Jul 12 10:13:28 bastion LinuxCommandsWazuh: User rihan [161199]:    35  cat ~/.bashrc 
Jul 12 10:13:37 bastion LinuxCommandsWazuh: User rihan [161199]:    35  cat ~/.bashrc 
Jul 12 10:16:13 bastion LinuxCommandsWazuh: User rihan [161199]:    36  redis-cli -h 10.190.0.12 -a 628a85a2-9474-475a-b234-f00bbae11964
Jul 12 10:16:30 bastion LinuxCommandsWazuh: User rihan [161199]:    37  redis-cli -h 10.190.0.12 -a 628a85a2-9474-475a-b234-f00bbae11964 keys hello_* | xargs DEL
Jul 12 10:17:21 bastion LinuxCommandsWazuh: User rihan [161199]:    38  redis-cli -h 10.190.0.12 keys hello_* | xargs redis-cli -h 10.190.0.12 DEL
Jul 12 10:17:59 bastion LinuxCommandsWazuh: User rihan [161199]:    39  redis-cli -h 10.190.0.12 -a 628a85a2-9474-475a-b234-f00bbae11964 keys hello_* | xargs redis-cli -h 10.190.0.12 -a 628a85a2-9474-475a-b234-f00bbae11964 DEL
Jul 12 10:18:52 bastion LinuxCommandsWazuh: User rihan [161199]:    40  redis-cli -h 10.190.0.12 -a 628a85a2-9474-475a-b234-f00bbae11964 keys hello_test_* | xargs redis-cli -h 10.190.0.12 -a 628a85a2-9474-475a-b234-f00bbae11964 DEL
Jul 12 10:19:17 bastion LinuxCommandsWazuh: User rihan [161199]:    41  redis-cli -h 10.190.0.12 -a 628a85a2-9474-475a-b234-f00bbae11964 keys hello_test_* | xargs redis-cli -h 10.190.0.12 DEL
Jul 12 10:19:47 bastion LinuxCommandsWazuh: User rihan [161199]:    41  redis-cli -h 10.190.0.12 -a 628a85a2-9474-475a-b234-f00bbae11964 keys hello_test_* | xargs redis-cli -h 10.190.0.12 DEL
Jul 12 10:20:38 bastion LinuxCommandsWazuh: User rihan [161199]:    42  redis-cli -h 10.190.0.12 -a 628a85a2-9474-475a-b234-f00bbae11964 keys identified_contacts_for_callback* | xargs redis-cli -h 10.190.0.12 -a 628a85a2-9474-475a-b234-f00bbae11964 DEL
Jul 12 10:20:45 bastion LinuxCommandsWazuh: User rihan [161199]:    42  redis-cli -h 10.190.0.12 -a 628a85a2-9474-475a-b234-f00bbae11964 keys identified_contacts_for_callback* | xargs redis-cli -h 10.190.0.12 -a 628a85a2-9474-475a-b234-f00bbae11964 DEL
Jul 12 10:25:01 bastion LinuxCommandsWazuh: User rihan [161199]:    42  redis-cli -h 10.190.0.12 -a 628a85a2-9474-475a-b234-f00bbae11964 keys identified_contacts_for_callback* | xargs redis-cli -h 10.190.0.12 -a 628a85a2-9474-475a-b234-f00bbae11964 DEL
Jul 12 10:25:05 bastion LinuxCommandsWazuh: User rihan [161199]:    43  history
Jul 12 10:25:42 bastion LinuxCommandsWazuh: User rihan [161199]:    44  vim ~/.bash_history 
Jul 12 10:25:46 bastion LinuxCommandsWazuh: User rihan [161199]:    44  vim ~/.bash_history 
Jul 12 10:25:54 bastion LinuxCommandsWazuh: User rihan [161199]:    45  history
Jul 12 10:26:49 bastion LinuxCommandsWazuh: User rihan [161199]:    46  echo $history
Jul 12 10:30:55 bastion LinuxCommandsWazuh: User rihan [161199]:    47  vi ~/.bash_history 
Jul 12 10:31:05 bastion LinuxCommandsWazuh: User rihan [161199]:    48  echo $shell
Jul 12 10:31:39 bastion LinuxCommandsWazuh: User rihan [161199]:    48  echo $shell
Jul 12 10:31:42 bastion LinuxCommandsWazuh: User rihan [162594]:    47  echo $shell
Jul 12 10:31:52 bastion LinuxCommandsWazuh: User rihan [162594]:    48  history
Jul 12 10:32:14 bastion LinuxCommandsWazuh: User rihan [162594]:    49  vim ~/.bash_history
Jul 12 10:32:17 bastion LinuxCommandsWazuh: User rihan [162594]:    50  history
Jul 12 10:32:21 bastion LinuxCommandsWazuh: User rihan [162691]:    43  history
Jul 12 10:32:22 bastion LinuxCommandsWazuh: User rihan [162691]:    43  history
Jul 12 10:36:32 bastion LinuxCommandsWazuh: User rihan [160567]:    28  redis
Jul 12 11:15:26 bastion LinuxCommandsWazuh: User shobhit [162996]:    43  mongo datalake
Jul 12 11:15:47 bastion LinuxCommandsWazuh: User shobhit [162996]:    44  docker ps
Jul 12 11:18:06 bastion LinuxCommandsWazuh: User shobhit [162996]:    45  mongo datalake
Jul 12 11:18:11 bastion LinuxCommandsWazuh: User shobhit [162996]:    46  ssh shobhit@34.131.11.11
Jul 12 11:18:32 bastion LinuxCommandsWazuh: User shobhit [162996]:    46  ssh shobhit@34.131.11.11