Sep 16 06:56:02 bastion LinuxCommandsWazuh: User ubuntu [2667208]: sudo su rihan Sep 16 06:56:09 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 858 kubectl get pods Sep 16 06:56:15 bastion LinuxCommandsWazuh: User ubuntu [2667208]: 1 byobu Sep 16 06:56:27 bastion LinuxCommandsWazuh: User ubuntu [2667208]: 2 gcloud auth activate-service-account --key-file=/home/service.json Sep 16 06:56:34 bastion LinuxCommandsWazuh: User ubuntu [2667208]: 3 gcloud container clusters get-credentials github-runner --zone asia-south2-a --project nitrox-415207 Sep 16 06:56:38 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 858 kubectl get pods Sep 16 07:04:17 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 858 kubectl get pods Sep 16 07:05:13 bastion LinuxCommandsWazuh: User ubuntu [2667208]: 4 byobu Sep 16 07:07:46 bastion LinuxCommandsWazuh: User ubuntu [2676082]: sudo su rihan Sep 16 07:07:51 bastion LinuxCommandsWazuh: User ubuntu [2676082]: 1 kubectl get pods Sep 16 07:07:54 bastion LinuxCommandsWazuh: User ubuntu [2676082]: 1 kubectl get pods Sep 16 07:07:57 bastion LinuxCommandsWazuh: User ubuntu [2676082]: 1 kubectl get pods Sep 16 07:08:13 bastion LinuxCommandsWazuh: User ubuntu [2676082]: 2 kubectl describe deploy cookie-cutter Sep 16 07:08:18 bastion LinuxCommandsWazuh: User ubuntu [2676082]: 2 kubectl describe deploy cookie-cutter Sep 16 07:08:19 bastion LinuxCommandsWazuh: User ubuntu [2676082]: 2 kubectl describe deploy cookie-cutter Sep 16 07:08:25 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ubuntu [2676082]: 2 kubectl describe deploy cookie-cutter] Sep 16 07:08:28 bastion LinuxCommandsWazuh: User ubuntu [2676082]: 3 kubectl get pods Sep 16 07:08:45 bastion LinuxCommandsWazuh: User ubuntu [2676082]: 4 kubectl describe pod cookie-cutter-5bfd9fc464-ztfq4 Sep 16 07:09:20 bastion LinuxCommandsWazuh: User devesh [2677946]: 153 cookie Sep 16 07:09:26 bastion LinuxCommandsWazuh: User devesh [2677946]: 154 cookie Sep 16 07:09:29 bastion LinuxCommandsWazuh: User devesh [2677946]: 155 psql Sep 16 07:09:39 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 859 kubectl logs -f cookie-cutter-5bfd9fc464-m9gdh Sep 16 07:09:40 bastion LinuxCommandsWazuh: message repeated 144 times: [ User ubuntu [2209911]: 859 kubectl logs -f cookie-cutter-5bfd9fc464-m9gdh] Sep 16 07:10:53 bastion LinuxCommandsWazuh: User aarzoo [2680250]: 70 kubectl get pods Sep 16 07:10:57 bastion LinuxCommandsWazuh: User aarzoo [2680250]: 70 kubectl get pods Sep 16 07:11:26 bastion LinuxCommandsWazuh: User ubuntu [2676082]: 5 kubectl get pods Sep 16 07:12:09 bastion LinuxCommandsWazuh: message repeated 9 times: [ User ubuntu [2676082]: 5 kubectl get pods] Sep 16 07:12:29 bastion LinuxCommandsWazuh: User ubuntu [2676082]: 5 kubectl get pods Sep 16 07:12:46 bastion LinuxCommandsWazuh: User ubuntu [2676082]: 6 kubectl describe pod cookie-cutter-cd8cfbf9d-lx7wd Sep 16 07:12:55 bastion LinuxCommandsWazuh: User ubuntu [2676082]: 7 curl -vl http://10.112.4.179:10099/health Sep 16 07:13:08 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [2676082]: 7 curl -vl http://10.112.4.179:10099/health] Sep 16 07:13:32 bastion LinuxCommandsWazuh: User ubuntu [2676082]: 8 curl -vl http://10.112.4.179:10099/health | jq Sep 16 07:13:53 bastion LinuxCommandsWazuh: User ubuntu [2676082]: 8 curl -vl http://10.112.4.179:10099/health | jq Sep 16 07:16:43 bastion LinuxCommandsWazuh: User aarzoo [2680250]: 71 kubectl logs -f collab-api-56dd6b64b8-5dsj9 Sep 16 07:16:49 bastion LinuxCommandsWazuh: User aarzoo [2680250]: 72 ls Sep 16 07:16:54 bastion LinuxCommandsWazuh: User aarzoo [2680250]: 73 cat README.md Sep 16 07:18:34 bastion LinuxCommandsWazuh: User ubuntu [2688491]: sudo su rihan Sep 16 07:18:34 bastion LinuxCommandsWazuh: User ubuntu [2688491]: 1 ls Sep 16 07:19:13 bastion LinuxCommandsWazuh: User devesh [2689106]: 153 cookie Sep 16 07:19:13 bastion LinuxCommandsWazuh: User devesh [2689106]: 154 ls Sep 16 07:19:13 bastion LinuxCommandsWazuh: User devesh [2689106]: 155 cd Sep 16 07:19:14 bastion LinuxCommandsWazuh: User devesh [2689106]: 156 ls Sep 16 07:19:17 bastion LinuxCommandsWazuh: User devesh [2689106]: 157 cat .bashrc Sep 16 07:19:56 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 860 kubectl get pods Sep 16 07:19:58 bastion LinuxCommandsWazuh: User devesh [2689106]: 158 kubectl describe configmap sso-config Sep 16 07:20:01 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 860 kubectl get pods Sep 16 07:20:10 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [2209911]: 860 kubectl get pods] Sep 16 07:20:24 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 861 kubectl describe pod cookie-cutter-77f5c4665d-5fzlp Sep 16 07:20:28 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 862 kubectl get pods Sep 16 07:20:37 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 862 kubectl get pods Sep 16 07:20:55 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 862 kubectl get pods Sep 16 07:21:17 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 863 kubectl describe pod cookie-cutter-77f5c4665d-5fzlp Sep 16 07:24:32 bastion LinuxCommandsWazuh: User devesh [2689106]: 158 kubectl describe configmap sso-config Sep 16 07:24:32 bastion LinuxCommandsWazuh: message repeated 3 times: [ User devesh [2689106]: 158 kubectl describe configmap sso-config] Sep 16 07:27:52 bastion LinuxCommandsWazuh: User aarzoo [2680250]: 74 kubectl logs -f collab-api-56dd6b64b8-5dsj9 Sep 16 07:27:57 bastion LinuxCommandsWazuh: User aarzoo [2680250]: 75 kubectl get pods Sep 16 07:29:53 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 864 kubectl get pods Sep 16 07:29:56 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [2209911]: 864 kubectl get pods] Sep 16 07:30:16 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 865 kubectl describe pod cookie-cutter-77f5c4665d-5fzlp Sep 16 07:30:24 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 866 kubectl get pods Sep 16 07:30:39 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [2209911]: 866 kubectl get pods] Sep 16 07:30:47 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 866 kubectl get pods Sep 16 07:30:53 bastion LinuxCommandsWazuh: User aarzoo [2680250]: 75 kubectl get pods Sep 16 07:30:54 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 866 kubectl get pods Sep 16 07:30:56 bastion LinuxCommandsWazuh: User aarzoo [2680250]: 75 kubectl get pods Sep 16 07:31:16 bastion LinuxCommandsWazuh: User aarzoo [2680250]: 76 kubectl logs -f cookie-cutter-queues Sep 16 07:31:22 bastion LinuxCommandsWazuh: User aarzoo [2680250]: 77 kubectl logs cookie-cutter-queues Sep 16 07:31:45 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 866 kubectl get pods Sep 16 07:31:49 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 866 kubectl get pods Sep 16 07:32:41 bastion LinuxCommandsWazuh: User aarzoo [2680250]: 78 kubectl logs -f cookie-cutter-queues Sep 16 07:33:09 bastion LinuxCommandsWazuh: User aarzoo [2680250]: 79 kubetail -f logs cookie-cutter-queues Sep 16 07:33:45 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 866 kubectl get pods Sep 16 07:34:23 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [2209911]: 866 kubectl get pods] Sep 16 07:34:49 bastion LinuxCommandsWazuh: User aarzoo [2680250]: 80 kubetail -f logs cookie-cutter-queues | grep 'collab' Sep 16 07:34:50 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 866 kubectl get pods Sep 16 07:35:09 bastion LinuxCommandsWazuh: User aarzoo [2680250]: 81 kubetail -f logs cookie-cutter-queues | grep 'NITROCOLLABCHECK' Sep 16 07:35:26 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 866 kubectl get pods Sep 16 07:37:14 bastion LinuxCommandsWazuh: message repeated 6 times: [ User ubuntu [2209911]: 866 kubectl get pods] Sep 16 07:37:34 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 867 kubectl describe pod cookie-cutter-77f5c4665d-5fzlp Sep 16 07:37:45 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ubuntu [2209911]: 867 kubectl describe pod cookie-cutter-77f5c4665d-5fzlp] Sep 16 07:38:26 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 868 kubectl get pods Sep 16 07:38:29 bastion LinuxCommandsWazuh: User aarzoo [2680250]: 81 kubetail -f logs cookie-cutter-queues | grep 'NITROCOLLABCHECK' Sep 16 07:39:44 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 868 kubectl get pods Sep 16 07:39:50 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 868 kubectl get pods Sep 16 07:39:52 bastion LinuxCommandsWazuh: User aarzoo [2680250]: 82 kubetail -f logs cookie-cutter-queues | grep 'NITROCOLLABCHECK' && grep 'collab' Sep 16 07:40:07 bastion LinuxCommandsWazuh: User devesh [2689106]: 158 kubectl describe configmap sso-config Sep 16 07:40:08 bastion LinuxCommandsWazuh: message repeated 2 times: [ User devesh [2689106]: 158 kubectl describe configmap sso-config] Sep 16 07:40:09 bastion LinuxCommandsWazuh: User devesh [3706273]: 153 cookie Sep 16 07:40:14 bastion LinuxCommandsWazuh: User devesh [2689106]: 159 byobu Sep 16 07:40:20 bastion LinuxCommandsWazuh: User devesh [2689106]: 160 htop Sep 16 07:40:28 bastion LinuxCommandsWazuh: User ubuntu [2688491]: 2 sudo su devesh Sep 16 07:40:32 bastion LinuxCommandsWazuh: User ubuntu [2209911]: 868 kubectl get pods Sep 16 07:40:47 bastion LinuxCommandsWazuh: User ubuntu [2676082]: 8 curl -vl http://10.112.4.179:10099/health | jq Sep 16 07:41:05 bastion LinuxCommandsWazuh: User ubuntu [2676082]: htop Sep 16 07:41:07 bastion LinuxCommandsWazuh: User ubuntu [2667208]: 4 byobu Sep 16 07:41:07 bastion LinuxCommandsWazuh: User ubuntu [2688491]: 3 byobu Sep 16 07:41:09 bastion LinuxCommandsWazuh: User ubuntu [2688491]: 4 ls Sep 16 07:41:10 bastion LinuxCommandsWazuh: User ubuntu [2688491]: 5 ks Sep 16 07:41:16 bastion LinuxCommandsWazuh: User aarzoo [2680250]: 83 kubetail -f logs cookie-cutter-queues | grep "NITROCOLLABCHECK \| collab" Sep 16 07:41:33 bastion LinuxCommandsWazuh: User aarzoo [2680250]: 83 kubetail -f logs cookie-cutter-queues | grep "NITROCOLLABCHECK \| collab" Sep 16 07:42:08 bastion LinuxCommandsWazuh: User ubuntu [2688491]: 6 htop Sep 16 08:25:56 bastion LinuxCommandsWazuh: User ubuntu [3898887]: 27 byobu Sep 16 08:26:04 bastion LinuxCommandsWazuh: User ubuntu [3898887]: 28 sudu su - devyanshu Sep 16 08:26:08 bastion LinuxCommandsWazuh: User devyanshu [3898933]: 150 kubectl logs -f aishopper-5f6dc6d8c6-4spmm Sep 16 08:26:09 bastion LinuxCommandsWazuh: User devyanshu [3898933]: 151 ls Sep 16 08:26:12 bastion LinuxCommandsWazuh: User devyanshu [3898933]: 152 make psql Sep 16 08:28:47 bastion LinuxCommandsWazuh: User devyanshu [3898933]: 153 vim Makefile Sep 16 08:34:53 bastion LinuxCommandsWazuh: User aarzoo [3899280]: 83 kubetail -f logs cookie-cutter-queues | grep "NITROCOLLABCHECK \| collab" Sep 16 08:35:05 bastion LinuxCommandsWazuh: User aarzoo [3899280]: 84 kubectl get pods Sep 16 08:35:32 bastion LinuxCommandsWazuh: User aarzoo [3899280]: 85 kubectl logs -f collab-api-56dd6b64b8-hgjw6 Sep 16 08:35:36 bastion LinuxCommandsWazuh: User aarzoo [3899280]: 86 kubectl get pods Sep 16 08:38:14 bastion LinuxCommandsWazuh: User shobhit [3899572]: 59 exit Sep 16 08:38:53 bastion LinuxCommandsWazuh: User shobhit [3899572]: 60 vi Makefile Sep 16 08:39:00 bastion LinuxCommandsWazuh: User shobhit [3899572]: 61 kubectl exec -it deployment.apps/cookie-cutter -- /bin/bash Sep 16 08:40:58 bastion LinuxCommandsWazuh: User shobhit [3899572]: 61* ectl exec -it deployment.apps/cookie-cutte Sep 16 08:40:58 bastion LinuxCommandsWazuh: message repeated 3 times: [ User shobhit [3899572]: 61* ectl exec -it deployment.apps/cookie-cutte] Sep 16 08:41:13 bastion LinuxCommandsWazuh: User aarzoo [3899280]: 87 kubectl logs -f collab-api-56dd6b64b8-hgjw6 Sep 16 10:04:09 bastion LinuxCommandsWazuh: User devesh [3900653]: 163 psql Sep 16 10:13:58 bastion LinuxCommandsWazuh: User shobhit [3900820]: 61 ectl exec -it deployment.apps/cookie-cutte Sep 16 10:14:11 bastion LinuxCommandsWazuh: User shobhit [3900820]: 62 vi Makefile Sep 16 10:14:32 bastion LinuxCommandsWazuh: User shobhit [3900820]: 63 kubectl logs -f deployments/aishopper Sep 16 10:16:27 bastion LinuxCommandsWazuh: User shobhit [3900996]: 63 kubectl logs -f deployments/aishopper Sep 16 10:16:49 bastion LinuxCommandsWazuh: User shobhit [3900996]: 63 kubectl logs -f deployments/aishopper Sep 16 10:22:01 bastion LinuxCommandsWazuh: User shobhit [3901181]: 63 kubectl logs -f deployments/aishopper Sep 16 10:22:04 bastion LinuxCommandsWazuh: User shobhit [3901181]: 64 kubectl logs -f deployments/aishopper\ Sep 16 10:22:40 bastion LinuxCommandsWazuh: User shobhit [3901181]: 65 kubectl logs -f deployments/aishopper Sep 16 10:22:40 bastion LinuxCommandsWazuh: message repeated 14 times: [ User shobhit [3901181]: 65 kubectl logs -f deployments/aishopper] Sep 16 10:34:13 bastion LinuxCommandsWazuh: User shobhit [3901181]: 65 kubectl logs -f deployments/aishopper Sep 16 10:34:14 bastion LinuxCommandsWazuh: message repeated 3 times: [ User shobhit [3901181]: 65 kubectl logs -f deployments/aishopper] Sep 16 11:18:27 bastion LinuxCommandsWazuh: User aarzoo [3902120]: 87 kubectl logs -f collab-api-56dd6b64b8-hgjw6 Sep 16 11:18:35 bastion LinuxCommandsWazuh: User aarzoo [3902120]: 88 kubectl get pods Sep 16 11:18:47 bastion LinuxCommandsWazuh: User aarzoo [3902120]: 88 kubectl get pods Sep 16 11:18:57 bastion LinuxCommandsWazuh: User aarzoo [3902120]: 89 kubectl -f logs sso-7d7b5fb5bf-wblkq Sep 16 11:19:21 bastion LinuxCommandsWazuh: User aarzoo [3902120]: kubectl logs -f sso-7d7b5fb5bf-wblkq Sep 16 11:19:38 bastion LinuxCommandsWazuh: User aarzoo [3902120]: 1 kubectl exec -it sso-7d7b5fb5bf-wblkq Sep 16 11:35:31 bastion LinuxCommandsWazuh: User anshika [3902577]: 64 exit Sep 16 11:35:51 bastion LinuxCommandsWazuh: User anshika [3902577]: 65 kubectl logs -f pages Sep 16 11:44:42 bastion LinuxCommandsWazuh: User shobhit [3902878]: 65 kubectl logs -f deployments/aishopper Sep 16 11:45:19 bastion LinuxCommandsWazuh: User aarzoo [3902120]: 2 kubectl exec -it sso-7d7b5fb5bf-wblkq bash Sep 16 11:50:23 bastion LinuxCommandsWazuh: User shobhit [3902878]: 66 vi Makefile Sep 16 11:51:05 bastion LinuxCommandsWazuh: User shobhit [3902878]: 67 kubectl logs -f deployments/aishopper Sep 16 11:51:25 bastion LinuxCommandsWazuh: User shobhit [3902878]: 68 vi Makefile Sep 16 11:53:40 bastion LinuxCommandsWazuh: User aarzoo [3903102]: 2 kubectl exec -it sso-7d7b5fb5bf-wblkq bash Sep 16 11:53:50 bastion LinuxCommandsWazuh: User aarzoo [3903102]: 3 cat README.md Sep 16 11:54:32 bastion LinuxCommandsWazuh: User aarzoo [3903102]: 4 psql Sep 16 11:55:53 bastion LinuxCommandsWazuh: User anshika [3903230]: 64 exit Sep 16 11:56:02 bastion LinuxCommandsWazuh: User anshika [3903230]: 65 kubectl logs -f storefront Sep 16 13:55:02 bastion LinuxCommandsWazuh: User shamailtayyab [3904294]: 229 ssh shamailtayyab@34.131.11.11 Sep 16 13:55:39 bastion LinuxCommandsWazuh: User shamailtayyab [3904294]: 230 psql Sep 16 13:55:43 bastion LinuxCommandsWazuh: User shamailtayyab [3904294]: 230 psql Sep 16 13:57:42 bastion LinuxCommandsWazuh: User shamailtayyab [3904449]: 230 psql Sep 16 13:57:45 bastion LinuxCommandsWazuh: User shamailtayyab [3904449]: 231 ls Sep 16 13:57:52 bastion LinuxCommandsWazuh: User shamailtayyab [3904449]: 232 kubectl get pods Sep 16 13:59:11 bastion LinuxCommandsWazuh: User shamailtayyab [3904449]: 233 kubectl exec -it nitrox-dj-5dc8fbcdc7-nj2dz bash Sep 16 13:59:17 bastion LinuxCommandsWazuh: User shamailtayyab [3904449]: 233 kubectl exec -it nitrox-dj-5dc8fbcdc7-nj2dz bash Sep 16 13:59:23 bastion LinuxCommandsWazuh: User shamailtayyab [3904449]: 234 kubectl get pods Sep 16 14:07:44 bastion LinuxCommandsWazuh: User shamailtayyab [3904766]: 230 psql Sep 16 14:07:45 bastion LinuxCommandsWazuh: User shamailtayyab [3904449]: 235 kubectl exec -it nitrox-dj-6cf5bd6f4c-mksr7 bash Sep 16 14:07:49 bastion LinuxCommandsWazuh: User shamailtayyab [3904766]: 230 psql Sep 16 14:07:51 bastion LinuxCommandsWazuh: User shamailtayyab [3904766]: 230 psql Sep 16 14:07:56 bastion LinuxCommandsWazuh: User shamailtayyab [3904766]: 231 docker ps Sep 16 14:07:57 bastion LinuxCommandsWazuh: User shamailtayyab [3904766]: 231 docker ps Sep 16 14:07:59 bastion LinuxCommandsWazuh: User shamailtayyab [3904888]: 236 docker ps Sep 16 14:08:05 bastion LinuxCommandsWazuh: User shamailtayyab [3904888]: 237 kubectl logs Sep 16 14:08:11 bastion LinuxCommandsWazuh: message repeated 2 times: [ User shamailtayyab [3904888]: 237 kubectl logs] Sep 16 14:19:29 bastion LinuxCommandsWazuh: User shamailtayyab [3904888]: 238 kubectl logs -f deployment.apps/cookie-cutter-queues | grep 'GkxxO Identify from' Sep 16 14:19:33 bastion LinuxCommandsWazuh: User shamailtayyab [3904888]: 239 kubectl logs -f deployment.apps/cookie-cutter-queues Sep 16 14:34:50 bastion LinuxCommandsWazuh: User shamailtayyab [3904888]: 239 kubectl logs -f deployment.apps/cookie-cutter-queues