Oct 7 07:00:46 bastion LinuxCommandsWazuh: User devesh [3318556]: 230 mongo pixel_v1 Oct 7 07:03:27 bastion LinuxCommandsWazuh: User aarzoo [3318712]: 101 psql Oct 7 07:03:46 bastion LinuxCommandsWazuh: User aarzoo [3318782]: 101 psql Oct 7 07:04:00 bastion LinuxCommandsWazuh: User aarzoo [3318712]: 102 byobu Oct 7 08:22:41 bastion LinuxCommandsWazuh: User devesh [3319657]: 230 mongo pixel_v1 Oct 7 08:48:25 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 306 kubetail cookie-cutter Oct 7 08:49:34 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 307 kubetail cookie-cutter | grep 'GkxxO' Oct 7 08:49:38 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 308 kubetail cookie-cutter-queues-58f5fc7f6- | grep 'GkxxO' Oct 7 08:49:45 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 309 kubetail cookie-cutter-queues| grep 'GkxxO' Oct 7 08:49:48 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 310 kubetail cookie-cutter-queues Oct 7 08:49:57 bastion LinuxCommandsWazuh: message repeated 2 times: [ User shamailtayyab [3319907]: 310 kubetail cookie-cutter-queues] Oct 7 08:50:40 bastion LinuxCommandsWazuh: User ubuntu [3483072]: 1018 kubectl get pods Oct 7 08:50:52 bastion LinuxCommandsWazuh: User ubuntu [3483072]: 1019 byobu Oct 7 08:50:54 bastion LinuxCommandsWazuh: User ubuntu [3483072]: 1020 ls Oct 7 08:51:05 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [3483072]: 1020 ls] Oct 7 08:52:43 bastion LinuxCommandsWazuh: User devesh [3319657]: 230 mongo pixel_v1 Oct 7 08:53:11 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 311 kubetail cookie-cutter-queues| grep 'GkxxO' Oct 7 08:56:39 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 311 kubetail cookie-cutter-queues| grep 'GkxxO' Oct 7 09:11:04 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 311 kubetail cookie-cutter-queues| grep 'GkxxO' Oct 7 09:56:06 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 311 kubetail cookie-cutter-queues| grep 'GkxxO' Oct 7 10:00:18 bastion LinuxCommandsWazuh: User ubuntu [2590794]: 1018 kubectl get pods Oct 7 10:00:22 bastion LinuxCommandsWazuh: User ubuntu [2590794]: 1019 htop Oct 7 10:00:37 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 311 kubetail cookie-cutter-queues| grep 'GkxxO' Oct 7 10:25:38 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 311 kubetail cookie-cutter-queues| grep 'GkxxO' Oct 7 10:26:38 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 312 kubetail cookie-cutter | grep 'GkxxO' Oct 7 10:30:44 bastion LinuxCommandsWazuh: message repeated 5 times: [ User shamailtayyab [3319907]: 312 kubetail cookie-cutter | grep 'GkxxO'] Oct 7 10:40:14 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 313 kubetail cookie-cutter-queues | grep 'GkxxO' Oct 7 10:40:50 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 314 kubetail cookie-cutter | grep 'GkxxO' Oct 7 10:40:52 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 315 kubetail cookie-cutter Oct 7 10:41:09 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 316 kubetail cookie-cutter-queues | grep 'GkxxO' Oct 7 10:45:40 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 316 kubetail cookie-cutter-queues | grep 'GkxxO' Oct 7 10:52:06 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 316 kubetail cookie-cutter-queues | grep 'GkxxO' Oct 7 11:04:20 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 316 kubetail cookie-cutter-queues | grep 'GkxxO' Oct 7 11:15:56 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 316 kubetail cookie-cutter-queues | grep 'GkxxO' Oct 7 11:16:14 bastion LinuxCommandsWazuh: message repeated 2 times: [ User shamailtayyab [3319907]: 316 kubetail cookie-cutter-queues | grep 'GkxxO'] Oct 7 11:16:19 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 317 vi Makefile Oct 7 11:16:54 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 318 make cookie-bash Oct 7 11:19:38 bastion LinuxCommandsWazuh: User shamailtayyab [735831]: 306 kubetail cookie-cutter Oct 7 11:19:58 bastion LinuxCommandsWazuh: User shamailtayyab [735831]: 307 ssh 10.190.15.231 Oct 7 11:21:56 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 318 make cookie-bash Oct 7 11:23:48 bastion LinuxCommandsWazuh: User devesh [1127668]: 230 mongo pixel_v1 Oct 7 11:24:25 bastion LinuxCommandsWazuh: User devesh [1127668]: 230 mongo pixel_v1 Oct 7 11:27:16 bastion LinuxCommandsWazuh: User shamailtayyab [735831]: 308 ssh ubuntu@10.190.15.231 Oct 7 11:28:10 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 319 kubetail cookie-cutter-queues | grep 'GkxxO' Oct 7 11:49:58 bastion LinuxCommandsWazuh: User shamailtayyab [3319907]: 319 kubetail cookie-cutter-queues | grep 'GkxxO' Oct 7 11:49:59 bastion LinuxCommandsWazuh: message repeated 2 times: [ User shamailtayyab [3319907]: 319 kubetail cookie-cutter-queues | grep 'GkxxO'] Oct 7 12:09:34 bastion LinuxCommandsWazuh: User rihan [2333773]: 295 make cookie-cutter-logs Oct 7 12:09:43 bastion LinuxCommandsWazuh: User rihan [2333773]: 296 psql -D munshi_v1 -u postgres Oct 7 12:11:29 bastion LinuxCommandsWazuh: User rihan [2333773]: 297 psql -d munshi_v1 -U postgres Oct 7 12:17:27 bastion LinuxCommandsWazuh: User rihan [2334117]: 297 psql -d munshi_v1 -U postgres Oct 7 13:45:32 bastion LinuxCommandsWazuh: User devesh [2335165]: 230 mongo pixel_v1 Oct 7 13:49:59 bastion LinuxCommandsWazuh: User rihan [2335285]: 297 psql -d munshi_v1 -U postgres Oct 7 13:55:33 bastion LinuxCommandsWazuh: User rihan [2335406]: 297 psql -d munshi_v1 -U postgres Oct 7 13:55:42 bastion LinuxCommandsWazuh: User rihan [2335406]: 298 sudo su Oct 7 14:18:37 bastion LinuxCommandsWazuh: User ubuntu [2335605]: 1022 ls Oct 7 14:18:45 bastion LinuxCommandsWazuh: User ubuntu [2335605]: 1022 ls Oct 7 14:18:57 bastion LinuxCommandsWazuh: User rihan [2335735]: 297 psql -d munshi_v1 -U postgres Oct 7 14:18:57 bastion LinuxCommandsWazuh: User rihan [2335735]: 298 ;s Oct 7 14:18:58 bastion LinuxCommandsWazuh: User rihan [2335735]: 299 cd Oct 7 14:19:11 bastion LinuxCommandsWazuh: User rihan [2335735]: 300 kubetail cookie-cutter Oct 7 14:19:30 bastion LinuxCommandsWazuh: User rihan [2335735]: 301 kubetail cookie-cutter | grep " 0.0.0.0:6379" Oct 7 14:19:31 bastion LinuxCommandsWazuh: User rihan [2335735]: 301 kubetail cookie-cutter | grep " 0.0.0.0:6379" Oct 7 14:19:32 bastion LinuxCommandsWazuh: User ubuntu [2335605]: 1023 sudo su rihan Oct 7 14:19:36 bastion LinuxCommandsWazuh: User ubuntu [2335605]: 1024 exuit Oct 7 21:50:26 bastion LinuxCommandsWazuh: User devesh [2359278]: 230 mongo pixel_v1 Oct 7 21:53:14 bastion LinuxCommandsWazuh: User devesh [2359394]: 230 mongo pixel_v1 Oct 7 21:53:19 bastion LinuxCommandsWazuh: User devesh [2359394]: 231 docker ps -a Oct 7 21:53:46 bastion LinuxCommandsWazuh: User devesh [2359394]: 232 mongo --host 10.8.0.8 Oct 7 21:53:53 bastion LinuxCommandsWazuh: User devesh [2359394]: 233 mongosh --host 10.8.0.8