Sep 24 07:10:08 bastion LinuxCommandsWazuh: User aarzoo [2125966]: 4 psql Sep 24 07:10:15 bastion LinuxCommandsWazuh: User aarzoo [2125966]: 5 cat README.md Sep 24 07:18:02 bastion LinuxCommandsWazuh: User devesh [2126246]: 195 cookie Sep 24 07:18:07 bastion LinuxCommandsWazuh: User devesh [2126246]: 196 kubectl get pods Sep 24 07:18:47 bastion LinuxCommandsWazuh: User devesh [2126246]: 197 kubectl logs -f sso-855d684d49-w5v9d Sep 24 07:19:55 bastion LinuxCommandsWazuh: User devesh [2126246]: 198 kubectl logs -f sso-855d684d49-w5v9d | grep "Setting password for user" Sep 24 07:28:55 bastion LinuxCommandsWazuh: User aarzoo [2125966]: 6 psql Sep 24 07:33:44 bastion LinuxCommandsWazuh: User devesh [2126736]: 195 cookie Sep 24 07:36:53 bastion LinuxCommandsWazuh: User devesh [2126246]: 198 kubectl logs -f sso-855d684d49-w5v9d | grep "Setting password for user" Sep 24 07:39:56 bastion LinuxCommandsWazuh: User aarzoo [2126900]: 6 psql Sep 24 07:41:11 bastion LinuxCommandsWazuh: User aarzoo [2126900]: 6 psql Sep 24 08:05:08 bastion LinuxCommandsWazuh: User devesh [2126246]: 198 kubectl logs -f sso-855d684d49-w5v9d | grep "Setting password for user" Sep 24 08:05:08 bastion LinuxCommandsWazuh: message repeated 6 times: [ User devesh [2126246]: 198 kubectl logs -f sso-855d684d49-w5v9d | grep "Setting password for user"] Sep 24 08:08:56 bastion LinuxCommandsWazuh: User devesh [2126246]: 198 kubectl logs -f sso-855d684d49-w5v9d | grep "Setting password for user" Sep 24 08:08:59 bastion LinuxCommandsWazuh: User devesh [2126246]: 199 kubectl logs -f sso-855d684d49-w5v9d Sep 24 08:09:03 bastion LinuxCommandsWazuh: User devesh [2126246]: 200 kubectl get pods Sep 24 08:12:52 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 49 htop Sep 24 08:12:52 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 50 ls Sep 24 08:13:13 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 51 crontab -e Sep 24 08:13:13 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 52 ls Sep 24 08:13:14 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 53 cd Sep 24 08:13:17 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 54 cd bin/ Sep 24 08:13:18 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 55 ls Sep 24 08:14:00 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 56 cat audit.sh Sep 24 08:14:02 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 57 ls Sep 24 08:14:05 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 58 cat log.sh Sep 24 08:14:09 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 59 cd Sep 24 08:14:10 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 60 ls Sep 24 08:14:21 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 61 cat ./bashrc Sep 24 08:14:27 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 62 cat .bashrc Sep 24 08:14:53 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 63 ls Sep 24 08:14:53 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 64 cd Sep 24 08:14:54 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 65 ll Sep 24 08:15:04 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 66 cat .profile Sep 24 08:15:17 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 67 ll Sep 24 08:15:29 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 68 cd Sep 24 08:15:29 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 69 ls Sep 24 08:15:32 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 69 ls Sep 24 08:15:38 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 70 cd bin/ Sep 24 08:15:38 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 71 ls Sep 24 08:15:40 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 72 cat log.sh Sep 24 08:15:43 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 73 cat recordslog.sh Sep 24 08:16:13 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 74 cat audit.sh Sep 24 08:16:20 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 75 ls Sep 24 08:16:24 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 76 cat recordslog.sh Sep 24 08:16:35 bastion LinuxCommandsWazuh: User devesh [2126246]: 201 kubectl logs -f sso-85fbb6594-snlrq | grep "Setting password for user" Sep 24 08:16:35 bastion LinuxCommandsWazuh: message repeated 5 times: [ User devesh [2126246]: 201 kubectl logs -f sso-85fbb6594-snlrq | grep "Setting password for user"] Sep 24 08:16:39 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 77 ls Sep 24 08:16:42 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 78 ll Sep 24 08:16:42 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 79 ls Sep 24 08:16:43 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 80 cd Sep 24 08:16:43 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 80 cd Sep 24 08:16:50 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 81 cd snap/ Sep 24 08:16:50 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 82 ls Sep 24 08:16:52 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 83 cd Sep 24 08:16:53 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 84 ks Sep 24 08:16:53 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 85 ls Sep 24 08:18:27 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 85 ls Sep 24 08:18:30 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 86 cd bin/ Sep 24 08:18:31 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 87 ls Sep 24 08:20:10 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 88 cat audit.sh Sep 24 08:23:43 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 89 ls Sep 24 08:23:44 bastion LinuxCommandsWazuh: User ubuntu [2127907]: cd Sep 24 08:23:45 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 1 ls Sep 24 08:23:57 bastion LinuxCommandsWazuh: User ubuntu [2127907]: 2 crontab -e Sep 24 08:24:06 bastion LinuxCommandsWazuh: User devesh [2126246]: 201 kubectl logs -f sso-85fbb6594-snlrq | grep "Setting password for user" Sep 24 08:24:12 bastion LinuxCommandsWazuh: User devesh [2126246]: 202 kubectl get pods Sep 24 08:55:18 bastion LinuxCommandsWazuh: User devesh [2126246]: 203 kubectl logs -f sso-5659dc459b-hp44z | grep "Setting password for user" Sep 24 09:13:31 bastion LinuxCommandsWazuh: User shadab [2130530]: 61 psql Sep 24 09:14:43 bastion LinuxCommandsWazuh: User shadab [2130530]: 62 ls Sep 24 09:50:19 bastion LinuxCommandsWazuh: User aarzoo [2130973]: 6 psql Sep 24 09:58:55 bastion LinuxCommandsWazuh: User shamailtayyab [2131098]: 268 psql -h 10.53.208.3 -d munshi_v1 -U postgres Sep 24 09:59:16 bastion LinuxCommandsWazuh: User shamailtayyab [2131098]: 268 psql -h 10.53.208.3 -d munshi_v1 -U postgres Sep 24 09:59:25 bastion LinuxCommandsWazuh: User shamailtayyab [2131098]: 269 kubetail cookie-cutter-queues Sep 24 09:59:26 bastion LinuxCommandsWazuh: User shamailtayyab [2131098]: 270 kubetail cookie-cutter-queues Sep 24 09:59:28 bastion LinuxCommandsWazuh: User shamailtayyab [2131098]: 270 kubetail cookie-cutter-queues Sep 24 10:00:26 bastion LinuxCommandsWazuh: User shamailtayyab [2131098]: 271 kubetail cookie-cutter-queues | grep GLOBAL-IDENTITY Sep 24 10:01:01 bastion LinuxCommandsWazuh: User shamailtayyab [2131098]: 272 kubetail cookie-cutter-queues | grep MAINTAIN_ORG_CONTACTS Sep 24 10:02:24 bastion LinuxCommandsWazuh: User shamailtayyab [2131098]: 273 kubetail cookie-cutter-queues | grep GLOBAL-IDENTITY Sep 24 10:06:03 bastion LinuxCommandsWazuh: User shamailtayyab [2131098]: 273 kubetail cookie-cutter-queues | grep GLOBAL-IDENTITY Sep 24 10:13:34 bastion LinuxCommandsWazuh: User shamailtayyab [2131098]: 273 kubetail cookie-cutter-queues | grep GLOBAL-IDENTITY Sep 24 10:13:36 bastion LinuxCommandsWazuh: User shamailtayyab [2131098]: 273 kubetail cookie-cutter-queues | grep GLOBAL-IDENTITY Sep 24 10:38:58 bastion LinuxCommandsWazuh: User shamailtayyab [2131098]: 274 kubetail cookie-cutter-queues | grep ADD-CUSTOMER-ADDRESS Sep 24 10:56:55 bastion LinuxCommandsWazuh: User shamailtayyab [2131098]: 274 kubetail cookie-cutter-queues | grep ADD-CUSTOMER-ADDRESS Sep 24 10:57:09 bastion LinuxCommandsWazuh: User shamailtayyab [2131098]: 275 nslookup femella-in.myshopify.com Sep 24 10:58:16 bastion LinuxCommandsWazuh: User shamailtayyab [2131098]: 275 nslookup femella-in.myshopify.com Sep 24 10:58:17 bastion LinuxCommandsWazuh: User shamailtayyab [2131098]: 276 git status Sep 24 11:20:40 bastion LinuxCommandsWazuh: User ubuntu [2387081]: 2 crontab -e Sep 24 11:29:04 bastion LinuxCommandsWazuh: User devesh [2126736]: 196 psql -h 10.53.208.3 -d tasdeeq -U postgres Sep 24 11:32:09 bastion LinuxCommandsWazuh: User shamailtayyab [2131098]: 276 git status Sep 24 14:07:59 bastion LinuxCommandsWazuh: User shadab [2389510]: 63 exit