Aug  9 07:29:16 bastion LinuxCommandsWazuh: User devesh [125733]:    51  cookie 
Aug  9 07:29:23 bastion LinuxCommandsWazuh: User devesh [125733]:    51  cookie 
Aug  9 07:29:27 bastion devesh: root@ [125757]: exit [0]
Aug  9 07:29:44 bastion LinuxCommandsWazuh: User devesh [125733]:    52  sudo su
Aug  9 08:06:11 bastion LinuxCommandsWazuh: User aarzoo [126076]:     4  exit
Aug  9 08:06:16 bastion LinuxCommandsWazuh: User aarzoo [126076]:     5  internal
Aug  9 08:12:53 bastion LinuxCommandsWazuh: User ubuntu [126202]:   496  sudo su devyanshu
Aug  9 08:12:54 bastion LinuxCommandsWazuh: User ubuntu [126202]:   497  ls
Aug  9 08:12:59 bastion LinuxCommandsWazuh: User aarzoo [126224]:     4  exit
Aug  9 08:12:59 bastion LinuxCommandsWazuh: User aarzoo [126224]:     5  ls
Aug  9 08:13:00 bastion LinuxCommandsWazuh: User aarzoo [126224]:     6  cd
Aug  9 08:13:01 bastion LinuxCommandsWazuh: User aarzoo [126224]:     7  ls
Aug  9 08:13:02 bastion LinuxCommandsWazuh: User aarzoo [126224]:     8  cd .ssh/
Aug  9 08:13:03 bastion LinuxCommandsWazuh: User aarzoo [126224]: ls
Aug  9 08:13:06 bastion LinuxCommandsWazuh: User aarzoo [126224]:    10  sudo vi authorized_keys 
Aug  9 08:13:10 bastion LinuxCommandsWazuh: User aarzoo [126224]:    11  vi authorized_keys 
Aug  9 08:13:16 bastion LinuxCommandsWazuh: User aarzoo [126224]:    12  ssh-keygen
Aug  9 08:13:21 bastion LinuxCommandsWazuh: User aarzoo [126224]:    13  cat /home/aarzoo/.ssh/id_rsa.pub
Aug  9 08:16:15 bastion LinuxCommandsWazuh: User ubuntu [126202]:   498  sudo su aarzoo
Aug  9 08:16:16 bastion ubuntu: root@ [126327]: exit [0]
Aug  9 08:16:17 bastion ubuntu: root@ [126327]: cd .. [0]
Aug  9 08:16:18 bastion ubuntu: root@ [126327]: ls [0]
Aug  9 08:16:20 bastion ubuntu: root@ [126327]: cd aarzoo/ [0]
Aug  9 08:16:20 bastion ubuntu: root@ [126327]: ls [0]
Aug  9 08:16:26 bastion ubuntu: root@ [126327]: cd .bashrc  [1]
Aug  9 08:16:27 bastion ubuntu: root@ [126327]: ls [0]
Aug  9 08:16:30 bastion ubuntu: root@ [126327]: cat .bashrc  [0]
Aug  9 08:16:59 bastion ubuntu: root@ [126327]: vi .bashrc  [0]
Aug  9 08:17:02 bastion ubuntu: root@ [126327]: source ~/.bashrc [0]
Aug  9 08:17:03 bastion LinuxCommandsWazuh: User ubuntu [126202]:   499  sudo su 
Aug  9 08:17:08 bastion LinuxCommandsWazuh: User aarzoo [126403]:    14  exit
Aug  9 08:17:11 bastion LinuxCommandsWazuh: User aarzoo [126403]:    15  source ~/.bashrc
Aug  9 08:17:54 bastion LinuxCommandsWazuh: User aarzoo [126076]:     5  internal
Aug  9 08:17:57 bastion LinuxCommandsWazuh: User aarzoo [126076]:     5  internal
Aug  9 08:18:04 bastion LinuxCommandsWazuh: User aarzoo [126545]:    15  internal
Aug  9 08:28:32 bastion LinuxCommandsWazuh: User aarzoo [126545]:    15  internal
Aug  9 08:28:44 bastion LinuxCommandsWazuh: User aarzoo [126701]:    15  internal
Aug  9 08:28:52 bastion LinuxCommandsWazuh: User aarzoo [126701]:    15  internal
Aug  9 08:29:14 bastion LinuxCommandsWazuh: User aarzoo [126701]:    16  ssh -L 54327:10.53.208.3:5432 ubuntu@34.131.11.11
Aug  9 08:33:31 bastion LinuxCommandsWazuh: User aarzoo [126403]:    16  internal
Aug  9 08:33:32 bastion LinuxCommandsWazuh: User ubuntu [126202]:   500  sudo su aarzoo
Aug  9 08:33:33 bastion LinuxCommandsWazuh: User ubuntu [126202]:   501  ls
Aug  9 08:37:27 bastion LinuxCommandsWazuh: User devesh [125733]:    53  internal 
Aug  9 08:37:36 bastion LinuxCommandsWazuh: User devesh [125733]:    54  cookie .
Aug  9 13:01:10 bastion LinuxCommandsWazuh: User venky [129101]:    56  exit
Aug  9 13:36:56 bastion LinuxCommandsWazuh: User venky [129829]:    57  internal
Aug  9 14:08:43 bastion LinuxCommandsWazuh: User venky [129829]:    57  internal
Aug  9 14:08:44 bastion LinuxCommandsWazuh: User venky [129829]:    57  internal