Jul 22 06:25:14 bastion LinuxCommandsWazuh: User rihan [279460]:    51  mongo pixel_v1
Jul 22 08:03:04 bastion LinuxCommandsWazuh: User ak [280184]:    87  exit
Jul 22 08:03:05 bastion LinuxCommandsWazuh: User ak [280184]:    88  ls
Jul 22 08:03:10 bastion LinuxCommandsWazuh: User devesh [280214]:    27  exit
Jul 22 08:03:11 bastion LinuxCommandsWazuh: User devesh [280214]:    28  ls
Jul 22 08:03:11 bastion LinuxCommandsWazuh: User devesh [280214]:    29  cd 
Jul 22 08:03:12 bastion LinuxCommandsWazuh: User devesh [280214]:    30  ls
Jul 22 08:03:13 bastion LinuxCommandsWazuh: User devesh [280214]:    31  cd .ssh/
Jul 22 08:03:13 bastion LinuxCommandsWazuh: User devesh [280214]:    32  ls
Jul 22 08:03:27 bastion LinuxCommandsWazuh: User devesh [280214]:    33  sudo vi authorized_keys 
Jul 22 08:03:45 bastion LinuxCommandsWazuh: User devesh [280358]:    27  exit
Jul 22 08:03:53 bastion LinuxCommandsWazuh: User devesh [280358]:    28  mongo datalake
Jul 22 08:15:32 bastion LinuxCommandsWazuh: User devesh [280214]:    33  sudo vi authorized_keys 
Jul 22 08:15:32 bastion LinuxCommandsWazuh: message repeated 3 times: [ User devesh [280214]:    33  sudo vi authorized_keys ]
Jul 22 08:15:33 bastion LinuxCommandsWazuh: User ak [280184]:    89  sudo su devesh
Jul 22 08:15:34 bastion LinuxCommandsWazuh: User ak [280184]: ls
Jul 22 08:22:25 bastion LinuxCommandsWazuh: User rihan [279460]:    52  psql
Jul 22 09:47:40 bastion LinuxCommandsWazuh: User devesh [281096]:    36  mongo pixel_v1
Jul 22 09:47:48 bastion LinuxCommandsWazuh: User devesh [281096]:    37  mongosh pixel_v1
Jul 22 09:48:03 bastion LinuxCommandsWazuh: User devesh [281096]:    37  mongosh pixel_v1
Jul 22 09:48:10 bastion LinuxCommandsWazuh: User root [281145]:    34  exit
Jul 22 09:48:20 bastion LinuxCommandsWazuh: User root [281145]:    35  mongosh pixel_v1
Jul 22 09:48:25 bastion LinuxCommandsWazuh: User devesh [281096]:    38  sudo su
Jul 22 09:48:29 bastion LinuxCommandsWazuh: User devesh [281096]:    39  mongosh pixel_v1
Jul 22 09:53:57 bastion LinuxCommandsWazuh: User devesh [281096]:    39  mongosh pixel_v1
Jul 22 09:54:08 bastion LinuxCommandsWazuh: message repeated 3 times: [ User devesh [281096]:    39  mongosh pixel_v1]
Jul 22 09:54:25 bastion LinuxCommandsWazuh: User devesh [281096]:    40  mongosh -d pixel_v1