Mar 27 11:57:32 bastion LinuxCommandsWazuh: User shamailtayyab [856834]: 1133 k get hpa Mar 27 11:57:38 bastion LinuxCommandsWazuh: User shamailtayyab [856834]: 1133 k get hpa Mar 27 12:10:47 bastion LinuxCommandsWazuh: User shamailtayyab [856834]: 1133 k get hpa Mar 27 12:10:47 bastion LinuxCommandsWazuh: User shamailtayyab [856834]: 1133 k get hpa Mar 27 12:35:59 bastion LinuxCommandsWazuh: User mohtashim [860250]: 589 exit Mar 27 12:36:26 bastion LinuxCommandsWazuh: User mohtashim [860250]: 590 psql Mar 27 12:51:31 bastion LinuxCommandsWazuh: User shamailtayyab [856834]: 1133 k get hpa Mar 27 12:53:51 bastion LinuxCommandsWazuh: User rihan [861273]: 786 mongo Mar 27 12:54:14 bastion LinuxCommandsWazuh: User ubuntu [861324]: 1799 pkill mosh-server Mar 27 12:54:18 bastion LinuxCommandsWazuh: User ubuntu [861324]: 1800 cd ../ubuntu Mar 27 12:54:21 bastion LinuxCommandsWazuh: User ubuntu [861324]: 1801 ll Mar 27 12:55:26 bastion LinuxCommandsWazuh: User ubuntu [861324]: 1802 cd ../rihan/ Mar 27 12:55:29 bastion LinuxCommandsWazuh: User rihan [861273]: 787 sudo su ubuntu Mar 27 12:55:39 bastion LinuxCommandsWazuh: User rihan [861273]: 788 ll Mar 27 12:55:52 bastion LinuxCommandsWazuh: User rihan [861273]: 789 docker ps Mar 27 12:56:03 bastion LinuxCommandsWazuh: User rihan [861273]: 790 kubectl Mar 27 12:56:09 bastion LinuxCommandsWazuh: User rihan [861273]: 791 kubectl get pods Mar 27 12:57:09 bastion LinuxCommandsWazuh: User rihan [862201]: 786 mongo Mar 27 12:57:33 bastion LinuxCommandsWazuh: User rihan [862201]: 787 kubectl get pods | grep parody Mar 27 12:57:56 bastion LinuxCommandsWazuh: User rihan [862201]: 788 kubetail -f parody Mar 27 12:57:58 bastion LinuxCommandsWazuh: User rihan [862201]: 789 kubectl get pods | grep parody Mar 27 12:58:21 bastion LinuxCommandsWazuh: User rihan [862201]: 790 kubetail -f parody-757c8b4d7b-96hxf Mar 27 13:21:46 bastion LinuxCommandsWazuh: User rihan [861273]: 792 kubectl exec -it parody-757c8b4d7b-96hxf -- bash Mar 27 13:25:19 bastion LinuxCommandsWazuh: User venky [870565]: 399 byobu Mar 27 13:26:24 bastion LinuxCommandsWazuh: User venky [870565]: 400 kubectl edit deploy cookie-cutter Mar 27 13:38:22 bastion LinuxCommandsWazuh: User shamailtayyab [856834]: 1133 k get hpa Mar 27 13:38:30 bastion LinuxCommandsWazuh: User shamailtayyab [856834]: 1133 k get hpa Mar 27 13:38:32 bastion LinuxCommandsWazuh: User shamailtayyab [856834]: 1134 k get pods Mar 27 13:39:06 bastion LinuxCommandsWazuh: User shamailtayyab [856834]: 1134 k get pods Mar 27 13:39:18 bastion LinuxCommandsWazuh: User shamailtayyab [856834]: 1135 k logs -f cookie-cutter-648c8b5ff5-w2pc5 Mar 27 14:07:23 bastion LinuxCommandsWazuh: User shamailtayyab [856834]: 1135 k logs -f cookie-cutter-648c8b5ff5-w2pc5 Mar 27 14:07:24 bastion LinuxCommandsWazuh: message repeated 3 times: [ User shamailtayyab [856834]: 1135 k logs -f cookie-cutter-648c8b5ff5-w2pc5] Mar 27 14:13:43 bastion LinuxCommandsWazuh: User shamailtayyab [856834]: 1135 k logs -f cookie-cutter-648c8b5ff5-w2pc5 Mar 27 14:13:45 bastion LinuxCommandsWazuh: message repeated 2 times: [ User shamailtayyab [856834]: 1135 k logs -f cookie-cutter-648c8b5ff5-w2pc5] Mar 27 14:13:48 bastion LinuxCommandsWazuh: User shamailtayyab [856834]: 1136 k get pods Mar 27 14:13:52 bastion LinuxCommandsWazuh: User shamailtayyab [856834]: 1136 k get pods Mar 27 14:14:22 bastion LinuxCommandsWazuh: User shamailtayyab [856834]: 1137 k logs -f cookie-cutter-queues-d4f6d8fdf-xrrcn | grep 'PxxO' Mar 27 14:52:47 bastion LinuxCommandsWazuh: User venky [870565]: 400 kubectl edit deploy cookie-cutter Mar 27 14:52:47 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [870565]: 400 kubectl edit deploy cookie-cutter] Mar 27 15:05:41 bastion LinuxCommandsWazuh: User mohtashim [890213]: 591 exit Mar 27 15:05:42 bastion LinuxCommandsWazuh: User mohtashim [890213]: 592 clear Mar 27 15:06:13 bastion LinuxCommandsWazuh: User mohtashim [890213]: 593 psql Mar 27 15:09:36 bastion LinuxCommandsWazuh: User shamailtayyab [894496]: 1133 k get hpa Mar 27 15:09:41 bastion LinuxCommandsWazuh: message repeated 2 times: [ User shamailtayyab [894496]: 1133 k get hpa] Mar 27 15:10:22 bastion LinuxCommandsWazuh: User shamailtayyab [894496]: 1134 mongosh --host 10.190.0.29 Mar 27 15:10:23 bastion LinuxCommandsWazuh: User shamailtayyab [894496]: 1135 git status Mar 27 15:10:25 bastion LinuxCommandsWazuh: User shamailtayyab [894496]: 1135 git status Mar 27 15:13:13 bastion LinuxCommandsWazuh: User venky [536665]: 467 kubectl get hpa Mar 27 16:23:02 bastion LinuxCommandsWazuh: User rihan [862201]: 791 kubetail parody Mar 27 16:36:27 bastion LinuxCommandsWazuh: User mohtashim [942180]: 594 exit Mar 27 16:38:06 bastion LinuxCommandsWazuh: User mohtashim [942180]: 595 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Mar 27 17:05:46 bastion LinuxCommandsWazuh: User venky [944516]: 401 byobu Mar 27 17:06:01 bastion LinuxCommandsWazuh: User venky [536665]: 467 kubectl get hpa Mar 27 17:06:01 bastion LinuxCommandsWazuh: User venky [536665]: 467 kubectl get hpa Mar 27 17:06:01 bastion LinuxCommandsWazuh: User venky [536665]: 467 kubectl get hpa Mar 27 17:06:10 bastion LinuxCommandsWazuh: User venky [536665]: 468 kubectl get po -owide Mar 27 17:07:47 bastion LinuxCommandsWazuh: User venky [536665]: 468 kubectl get po -owide Mar 27 17:07:48 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [536665]: 468 kubectl get po -owide ] Mar 27 17:10:49 bastion LinuxCommandsWazuh: User venky [536665]: 469 sudo apt install ripgrep Mar 27 17:11:05 bastion LinuxCommandsWazuh: User venky [536665]: 470 sudo su - Mar 27 17:15:32 bastion LinuxCommandsWazuh: User venky [536665]: 471 sudo su - ubuntu Mar 27 17:15:37 bastion LinuxCommandsWazuh: message repeated 7 times: [ User venky [536665]: 471 sudo su - ubuntu ] Mar 27 17:16:09 bastion LinuxCommandsWazuh: User venky [536665]: 472 kubetail cookie-cutter-queues-5c5cbd45c7-42xwx Mar 27 17:16:09 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [536665]: 472 kubetail cookie-cutter-queues-5c5cbd45c7-42xwx ] Mar 27 17:16:39 bastion LinuxCommandsWazuh: User ubuntu [958280]: 1802 cd ../rihan/ Mar 27 17:16:40 bastion LinuxCommandsWazuh: User ubuntu [958280]: 1803 ls Mar 27 17:17:39 bastion LinuxCommandsWazuh: User shamailtayyab [959271]: 1135 git status Mar 27 17:17:42 bastion LinuxCommandsWazuh: User shamailtayyab [959271]: 1136 sudo ls Mar 27 17:17:48 bastion LinuxCommandsWazuh: User ubuntu [958280]: 1804 sudo usermod -aG google-sudoers venky Mar 27 17:17:53 bastion LinuxCommandsWazuh: User venky [959506]: 401 byobu Mar 27 17:17:57 bastion ubuntu: root@ [959583]: exit [0] Mar 27 17:18:00 bastion LinuxCommandsWazuh: User venky [959506]: 402 sudo su Mar 27 17:18:01 bastion LinuxCommandsWazuh: User venky [959506]: 403 ls Mar 27 17:18:04 bastion LinuxCommandsWazuh: User ubuntu [958280]: 1805 sudo su venky Mar 27 17:18:05 bastion LinuxCommandsWazuh: User ubuntu [958280]: 1806 ls Mar 27 17:25:59 bastion LinuxCommandsWazuh: User venky [536665]: 472 kubetail cookie-cutter-queues-5c5cbd45c7-42xwx Mar 27 17:26:00 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [536665]: 472 kubetail cookie-cutter-queues-5c5cbd45c7-42xwx ] Mar 27 17:26:14 bastion LinuxCommandsWazuh: User venky [536665]: 473 kubetail cookie-cutter-queues-5c5cbd45c7-42xwx | grep "HIU_DEBUG" Mar 27 17:26:15 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [536665]: 473 kubetail cookie-cutter-queues-5c5cbd45c7-42xwx | grep "HIU_DEBUG"] Mar 27 17:27:03 bastion LinuxCommandsWazuh: User venky [536665]: 474 kubetail cookie-cutter-queues-5c5cbd45c7 | grep "HIU_DEBUG" Mar 27 17:31:20 bastion LinuxCommandsWazuh: User venky [536665]: 474 kubetail cookie-cutter-queues-5c5cbd45c7 | grep "HIU_DEBUG" Mar 27 17:31:59 bastion LinuxCommandsWazuh: User venky [536665]: 475 kubetail cookie-cutter- | grep "HIU_DEBUG" Mar 27 17:31:59 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [536665]: 475 kubetail cookie-cutter- | grep "HIU_DEBUG"] Mar 27 17:35:47 bastion LinuxCommandsWazuh: User venky [536665]: 475 kubetail cookie-cutter- | grep "HIU_DEBUG" Mar 27 17:35:47 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [536665]: 475 kubetail cookie-cutter- | grep "HIU_DEBUG"] Mar 27 17:44:43 bastion LinuxCommandsWazuh: User venky [536665]: 475 kubetail cookie-cutter- | grep "HIU_DEBUG" Mar 27 17:44:59 bastion LinuxCommandsWazuh: message repeated 4 times: [ User venky [536665]: 475 kubetail cookie-cutter- | grep "HIU_DEBUG"] Mar 27 17:45:05 bastion LinuxCommandsWazuh: User venky [536665]: 476 kubectl get po Mar 27 17:45:17 bastion LinuxCommandsWazuh: User venky [536665]: 477 kubectl get po | cookie Mar 27 17:45:20 bastion LinuxCommandsWazuh: User venky [536665]: 478 kubectl get po | grep cookie Mar 27 17:45:29 bastion LinuxCommandsWazuh: User venky [536665]: 479 kubectl get po | grep cookie | less Mar 27 17:45:41 bastion LinuxCommandsWazuh: User venky [536665]: 480 kubetail cookie-cutter-f5455948c-67tm9 | grep "HIU_DEBUG" Mar 27 17:45:41 bastion LinuxCommandsWazuh: User venky [536665]: 480 kubetail cookie-cutter-f5455948c-67tm9 | grep "HIU_DEBUG" Mar 27 17:46:40 bastion LinuxCommandsWazuh: User venky [536665]: 481 kubetail cookie-cutter-f5455948c | grep "HIU_DEBUG" Mar 27 17:46:53 bastion LinuxCommandsWazuh: User venky [536665]: 482 kubetail cookie-cutter-f5455948c Mar 27 17:47:59 bastion LinuxCommandsWazuh: User venky [536665]: 483 kubetail cookie-cutter-f5455948c | grep PxxO Mar 27 18:12:10 bastion LinuxCommandsWazuh: User venky [536665]: 484 kubetail cookie-cutter-f5455948c | grep "HIU_DEBUG" Mar 27 18:19:54 bastion LinuxCommandsWazuh: User venky [536665]: 484 kubetail cookie-cutter-f5455948c | grep "HIU_DEBUG" Mar 27 18:19:55 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [536665]: 484 kubetail cookie-cutter-f5455948c | grep "HIU_DEBUG"] Mar 27 18:20:05 bastion LinuxCommandsWazuh: User venky [536665]: 485 sudo apt install ripgrep Mar 27 18:20:07 bastion LinuxCommandsWazuh: message repeated 5 times: [ User venky [536665]: 485 sudo apt install ripgrep] Mar 27 18:20:10 bastion LinuxCommandsWazuh: User venky [2802570]: 404 exit Mar 27 18:20:17 bastion LinuxCommandsWazuh: User venky [2802570]: 405 sudo apt install ripgrep Mar 27 18:20:23 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [2802570]: 405 sudo apt install ripgrep] Mar 27 18:20:24 bastion LinuxCommandsWazuh: User venky [944516]: 401 byobu Mar 27 18:20:26 bastion LinuxCommandsWazuh: User venky [944516]: 401 byobu Mar 27 18:20:28 bastion LinuxCommandsWazuh: User venky [2802911]: 405 sudo apt install ripgrep Mar 27 18:20:44 bastion LinuxCommandsWazuh: User venky [2802911]: 405 sudo apt install ripgrep Mar 27 18:20:53 bastion LinuxCommandsWazuh: User venky [536665]: 486 kubetail cookie-cutter-f5455948c | grep PxxO Mar 27 18:20:54 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [536665]: 486 kubetail cookie-cutter-f5455948c | grep PxxO] Mar 27 18:20:59 bastion LinuxCommandsWazuh: User venky [536665]: 487 kubetail cookie-cutter-f5455948c | rip PxxO Mar 27 18:21:03 bastion LinuxCommandsWazuh: User venky [536665]: 488 kubetail cookie-cutter-f5455948c | rp PxxO Mar 27 18:21:04 bastion LinuxCommandsWazuh: User venky [536665]: 488 kubetail cookie-cutter-f5455948c | rp PxxO Mar 27 18:21:17 bastion LinuxCommandsWazuh: User venky [536665]: 489 kubetail cookie-cutter-f5455948c | ripgrep PxxO Mar 27 18:21:37 bastion LinuxCommandsWazuh: User venky [536665]: 489 kubetail cookie-cutter-f5455948c | ripgrep PxxO Mar 27 18:21:38 bastion LinuxCommandsWazuh: message repeated 4 times: [ User venky [536665]: 489 kubetail cookie-cutter-f5455948c | ripgrep PxxO] Mar 27 18:23:01 bastion LinuxCommandsWazuh: User mohtashim [2806710]: 596 exit Mar 27 18:30:51 bastion LinuxCommandsWazuh: User mohtashim [2806710]: 597 psql Mar 27 18:56:46 bastion LinuxCommandsWazuh: User mohtashim [2839966]: 598 exit Mar 27 19:03:57 bastion LinuxCommandsWazuh: User mohtashim [2839966]: 599 psql Mar 27 19:18:02 bastion LinuxCommandsWazuh: User venky [536665]: 490 kubetail cookie-cutter-f5455948c | rg PxxO Mar 27 19:18:20 bastion LinuxCommandsWazuh: User venky [536665]: 491 kubetail cookie-cutter Mar 27 19:18:27 bastion LinuxCommandsWazuh: message repeated 7 times: [ User venky [536665]: 491 kubetail cookie-cutter] Mar 27 19:18:47 bastion LinuxCommandsWazuh: User venky [536665]: 492 kubetail cookie-cutter- | rg PxxO Mar 27 19:18:48 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [536665]: 492 kubetail cookie-cutter- | rg PxxO] Mar 27 19:19:03 bastion LinuxCommandsWazuh: User venky [536665]: 493 kubetail cookie-cutter-6db558dc48-65288 | rg PxxO Mar 27 19:44:10 bastion LinuxCommandsWazuh: User rihan [1314445]: 786 mongo Mar 27 19:44:16 bastion LinuxCommandsWazuh: User rihan [1314445]: 786 mongo Mar 27 19:44:16 bastion LinuxCommandsWazuh: User rihan [1314445]: 786 mongo Mar 27 19:44:42 bastion LinuxCommandsWazuh: User rihan [1314445]: 787 kubetail parody Mar 27 19:44:42 bastion LinuxCommandsWazuh: message repeated 2 times: [ User rihan [1314445]: 787 kubetail parody] Mar 27 19:44:51 bastion LinuxCommandsWazuh: User rihan [1314445]: 788 kubectl get pods | grep parody Mar 27 19:45:46 bastion LinuxCommandsWazuh: User venky [1500154]: 406 byobu Mar 27 19:49:25 bastion LinuxCommandsWazuh: User venky [536665]: 494 kubetail cookie-cutter-6db558dc48 | rg PxxO Mar 27 19:49:25 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [536665]: 494 kubetail cookie-cutter-6db558dc48 | rg PxxO] Mar 27 19:54:28 bastion LinuxCommandsWazuh: User venky [536665]: 495 kubetail cookie-cutter-6db558dc48 | rg HIU_DEBUG Mar 27 19:54:28 bastion LinuxCommandsWazuh: User venky [536665]: 495 kubetail cookie-cutter-6db558dc48 | rg HIU_DEBUG Mar 27 19:54:34 bastion LinuxCommandsWazuh: User venky [536665]: 496 htop Mar 27 20:05:27 bastion LinuxCommandsWazuh: User rihan [1314445]: 789 kubetail parody-58d5db6d55-8k9lj Mar 27 20:05:27 bastion LinuxCommandsWazuh: User rihan [1314445]: 789 kubetail parody-58d5db6d55-8k9lj Mar 27 20:05:27 bastion LinuxCommandsWazuh: User rihan [1314445]: 789 kubetail parody-58d5db6d55-8k9lj Mar 27 20:05:34 bastion LinuxCommandsWazuh: User rihan [1314445]: 790 kubetail parody Mar 27 20:05:34 bastion LinuxCommandsWazuh: User rihan [1314445]: 790 kubetail parody Mar 27 20:05:38 bastion LinuxCommandsWazuh: User rihan [1314445]: 791 kubectl get pods | grep parody Mar 27 20:06:05 bastion LinuxCommandsWazuh: User shamailtayyab [2426931]: 1136 sudo ls Mar 27 20:07:12 bastion LinuxCommandsWazuh: User shamailtayyab [2426931]: 1136 sudo ls Mar 27 20:09:44 bastion LinuxCommandsWazuh: User rihan [1314445]: 792 kubetail parody Mar 27 20:15:14 bastion LinuxCommandsWazuh: User rihan [2435357]: 786 mongo Mar 27 20:22:57 bastion LinuxCommandsWazuh: User rihan [2435357]: 787 kubetail parody Mar 27 20:24:26 bastion LinuxCommandsWazuh: User shamailtayyab [2426931]: 1137 mongosh --host 10.190.0.29 Mar 27 20:26:45 bastion LinuxCommandsWazuh: User rihan [2435357]: 787 kubetail parody Mar 27 20:27:01 bastion LinuxCommandsWazuh: User rihan [2435357]: 788 kubectl get pods | grep parody Mar 27 20:28:34 bastion LinuxCommandsWazuh: User rihan [1314445]: 793 kubectl exec -it parody-c778f9879-d8982 -- bash Mar 27 20:34:25 bastion LinuxCommandsWazuh: User rihan [2435357]: 789 kubetail parody Mar 27 20:34:26 bastion LinuxCommandsWazuh: User rihan [2435357]: 790 kubectl get pods | grep parody Mar 27 20:42:25 bastion LinuxCommandsWazuh: User rihan [2435357]: 791 kubetail parody Mar 27 20:47:30 bastion LinuxCommandsWazuh: User rihan [1314445]: 794 k get hpa | grep "parody" Mar 27 20:47:39 bastion LinuxCommandsWazuh: User rihan [1314445]: 795 kubectl get hpa | grep "parody"