Apr 11 12:00:13 bastion LinuxCommandsWazuh: User ankur [1111296]: 44 exit Apr 11 12:00:15 bastion LinuxCommandsWazuh: User ankur [1111296]: 45 ls Apr 11 12:02:41 bastion LinuxCommandsWazuh: User ankur [1111296]: 46 clickhouse-ssh Apr 11 12:07:38 bastion LinuxCommandsWazuh: User ankur [1112098]: 47 exit Apr 11 12:07:39 bastion LinuxCommandsWazuh: User ankur [1112098]: 48 ls Apr 11 12:07:49 bastion LinuxCommandsWazuh: User ankur [1112098]: 49 psql -U postgres Apr 11 12:07:53 bastion LinuxCommandsWazuh: User ankur [1112098]: 49 psql -U postgres Apr 11 12:07:56 bastion LinuxCommandsWazuh: User ankur [1112098]: 50 psql -U postgres \ Apr 11 12:07:59 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [1112098]: 50 psql -U postgres \] Apr 11 12:12:24 bastion LinuxCommandsWazuh: User ankur [1112319]: 47 exit Apr 11 12:14:15 bastion LinuxCommandsWazuh: User ankur [1112098]: 51 psql -U postgres Apr 11 12:14:40 bastion LinuxCommandsWazuh: User ankur [1112098]: 52 kubectl describe configmaps nitrox-ck-config Apr 11 12:18:21 bastion LinuxCommandsWazuh: User ankur [1112098]: 52 kubectl describe configmaps nitrox-ck-config Apr 11 12:18:22 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [1112098]: 52 kubectl describe configmaps nitrox-ck-config] Apr 11 12:19:08 bastion LinuxCommandsWazuh: User ankur [1112098]: 53 kubetail logs cookie-cutter "impression campaign passed time and started tracking" Apr 11 12:19:14 bastion LinuxCommandsWazuh: User ankur [1112098]: 54 kubetail logs cookie-cutter "impression campaign" Apr 11 12:19:22 bastion LinuxCommandsWazuh: User ankur [1112098]: 55 kubetail logs cookie-cutter | grep -i "impression campaign" Apr 11 12:19:25 bastion LinuxCommandsWazuh: User ankur [1112098]: 55 kubetail logs cookie-cutter | grep -i "impression campaign" Apr 11 12:23:05 bastion LinuxCommandsWazuh: User rihan [1114316]: 859 psql Apr 11 12:23:05 bastion LinuxCommandsWazuh: User rihan [1114372]: 859 psql Apr 11 12:23:05 bastion LinuxCommandsWazuh: User rihan [1114366]: 859 psql Apr 11 12:23:05 bastion LinuxCommandsWazuh: User rihan [1114476]: 859 psql Apr 11 12:24:12 bastion LinuxCommandsWazuh: User rihan [1114590]: 859 psql Apr 11 12:24:29 bastion LinuxCommandsWazuh: User rihan [600257]: 828 psql -d datapulse_v1 -U postgres Apr 11 12:24:32 bastion LinuxCommandsWazuh: User rihan [594490]: 828 psql Apr 11 12:24:44 bastion LinuxCommandsWazuh: User rihan [600257]: 829 kubectl get pods Apr 11 12:25:02 bastion LinuxCommandsWazuh: User rihan [600257]: 829 kubectl get pods Apr 11 12:25:09 bastion LinuxCommandsWazuh: User rihan [600257]: 830 kubectl get configmaps Apr 11 12:28:25 bastion LinuxCommandsWazuh: User rihan [600257]: 831 kubectl edit configmap nitrox-ck-config Apr 11 12:34:45 bastion LinuxCommandsWazuh: User rihan [600257]: 832 kubectl get pods | grep cookie Apr 11 12:39:51 bastion LinuxCommandsWazuh: User rihan [600257]: 832 kubectl get pods | grep cookie Apr 11 12:39:53 bastion LinuxCommandsWazuh: message repeated 31 times: [ User rihan [600257]: 832 kubectl get pods | grep cookie] Apr 11 12:46:37 bastion LinuxCommandsWazuh: User mohtashim [1577153]: 522 exit Apr 11 12:47:15 bastion LinuxCommandsWazuh: User mohtashim [1577153]: 523 clear Apr 11 12:50:12 bastion LinuxCommandsWazuh: User mohtashim [1902839]: 524 kubectl get pods Apr 11 12:53:03 bastion LinuxCommandsWazuh: User mohtashim [1902839]: 524 kubectl get pods Apr 11 13:09:04 bastion LinuxCommandsWazuh: User mohtashim [3608722]: 524 kubectl get pods Apr 11 13:10:05 bastion LinuxCommandsWazuh: User mohtashim [3608722]: 524 kubectl get pods Apr 11 13:10:32 bastion LinuxCommandsWazuh: User mohtashim [3739127]: 524 kubectl get pods Apr 11 13:10:35 bastion LinuxCommandsWazuh: User mohtashim [3739127]: 524 kubectl get pods Apr 11 13:11:39 bastion LinuxCommandsWazuh: User mohtashim [3739127]: 525 htop Apr 11 13:11:42 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3739127]: 525 htop] Apr 11 13:11:56 bastion LinuxCommandsWazuh: User rihan [3865594]: 860 byobu Apr 11 13:11:59 bastion LinuxCommandsWazuh: message repeated 3 times: [ User rihan [3865594]: 860 byobu] Apr 11 13:12:22 bastion LinuxCommandsWazuh: User rihan [600257]: 833 kubetail -f cookie-cutter | grep "GDPR>>" Apr 11 13:12:24 bastion LinuxCommandsWazuh: message repeated 8 times: [ User rihan [600257]: 833 kubetail -f cookie-cutter | grep "GDPR>>"] Apr 11 13:12:30 bastion LinuxCommandsWazuh: User rihan [3865594]: 860 byobu Apr 11 13:12:40 bastion LinuxCommandsWazuh: User mohtashim [3910389]: 524 kubectl get pods Apr 11 13:12:52 bastion LinuxCommandsWazuh: User mohtashim [3910389]: 525 htop Apr 11 13:12:55 bastion LinuxCommandsWazuh: User rihan [3865594]: 861 sudo su - mohtashim Apr 11 13:12:57 bastion LinuxCommandsWazuh: User mohtashim [3739127]: 526 sudo su - rihan Apr 11 13:15:50 bastion LinuxCommandsWazuh: User mohtashim [3911141]: 529 exit Apr 11 13:15:53 bastion LinuxCommandsWazuh: User mohtashim [3911141]: 530 clear Apr 11 13:17:20 bastion LinuxCommandsWazuh: User devesh [3911277]: 1122 clear Apr 11 13:20:15 bastion LinuxCommandsWazuh: User devesh [314691]: 1123 kubectl get pods Apr 11 13:20:25 bastion LinuxCommandsWazuh: User devesh [314691]: 1124 kubectl get configmaps Apr 11 13:22:35 bastion LinuxCommandsWazuh: User mohtashim [3916407]: 529 exit Apr 11 13:22:51 bastion LinuxCommandsWazuh: User mohtashim [3916407]: 530 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 11 13:52:27 bastion LinuxCommandsWazuh: User mohtashim [3916407]: 530 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 11 14:00:51 bastion LinuxCommandsWazuh: User mohtashim [3953744]: 533 exit Apr 11 15:00:26 bastion LinuxCommandsWazuh: User ankur [4011571]: 57 psql Apr 11 15:00:28 bastion LinuxCommandsWazuh: User ankur [4011571]: 58 ls Apr 11 15:00:47 bastion LinuxCommandsWazuh: User ankur [4011571]: 59 kubectl get pods | grep -i cook Apr 11 15:02:47 bastion LinuxCommandsWazuh: User ankur [4011571]: 60 kubectl logs -f cookie-cutter-5695d8c9d-7nvns | grep -i "DEBUG_VORTEX:d82180e4-4dd9-47be-a6d3-710f0cc45a06" Apr 11 15:02:51 bastion LinuxCommandsWazuh: message repeated 6 times: [ User ankur [4011571]: 60 kubectl logs -f cookie-cutter-5695d8c9d-7nvns | grep -i "DEBUG_VORTEX:d82180e4-4dd9-47be-a6d3-710f0cc45a06"] Apr 11 15:02:52 bastion LinuxCommandsWazuh: User ankur [4011571]: 61 kubectl logs -f cookie-cutter-5695d8c9d-7nvns | grep -i "DEBUG_VORTEX:d82180e4-4dd9-47be-a6d3-710f0cc45a06"\ Apr 11 15:02:53 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [4011571]: 61 kubectl logs -f cookie-cutter-5695d8c9d-7nvns | grep -i "DEBUG_VORTEX:d82180e4-4dd9-47be-a6d3-710f0cc45a06"\] Apr 11 17:24:29 bastion LinuxCommandsWazuh: User mohtashim [4039565]: 534 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 11 17:24:31 bastion LinuxCommandsWazuh: message repeated 3 times: [ User mohtashim [4039565]: 534 psql -h 10.94.16.3 -U postgres -d datapulse_v1] Apr 11 17:29:07 bastion LinuxCommandsWazuh: User mohtashim [4039565]: 534 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 11 19:02:59 bastion LinuxCommandsWazuh: User ankur [4011571]: 62 kubectl logs -f cookie-cutter-5695d8c9d-7nvns | grep -i "DEBUG_VORTEX:" Apr 11 19:02:59 bastion LinuxCommandsWazuh: message repeated 8 times: [ User ankur [4011571]: 62 kubectl logs -f cookie-cutter-5695d8c9d-7nvns | grep -i "DEBUG_VORTEX:"]