May 16 11:54:46 bastion LinuxCommandsWazuh: User ankur [368594]: 491 exit May 16 11:54:48 bastion LinuxCommandsWazuh: User ankur [368594]: 492 ls May 16 12:00:35 bastion LinuxCommandsWazuh: User ankur [374807]: 491 exit May 16 12:00:40 bastion LinuxCommandsWazuh: User ankur [374807]: 492 ls May 16 12:00:51 bastion LinuxCommandsWazuh: User ankur [374807]: 493 k get pods May 16 12:01:10 bastion LinuxCommandsWazuh: User ankur [374807]: 494 k get pods | grep -i house May 16 12:12:57 bastion LinuxCommandsWazuh: User ankur [386868]: 491 exit May 16 12:26:36 bastion LinuxCommandsWazuh: User ankur [374807]: 495 k exec -it house-of-click-789594f9df-6hrjv bash May 16 12:28:49 bastion LinuxCommandsWazuh: User ankur [386868]: 492 clickhouse-ssh May 16 12:48:37 bastion LinuxCommandsWazuh: User ankur [419540]: 500 byobu May 16 12:48:46 bastion LinuxCommandsWazuh: User ankur [419685]: 500 byobu May 16 12:48:55 bastion LinuxCommandsWazuh: User ankur [419685]: 501 k get pods | grep house May 16 12:49:09 bastion LinuxCommandsWazuh: User ankur [419685]: 502 k logs -f house-of-click-789594f9df-6hrjv May 16 12:49:17 bastion LinuxCommandsWazuh: User ankur [419685]: 503 k logs -f house-of-click-789594f9df-6hrjv | grep -i " May 16 12:49:17 bastion LinuxCommandsWazuh: User ankur [419685]: 503 k logs -f house-of-click-789594f9df-6hrjv | grep -i " May 16 12:49:37 bastion LinuxCommandsWazuh: User ankur [420539]: 500 byobu May 16 12:49:53 bastion LinuxCommandsWazuh: User ankur [420539]: 501 k get pods | grep nitrox May 16 13:10:40 bastion LinuxCommandsWazuh: User ankur [441252]: 500 byobu May 16 13:10:42 bastion LinuxCommandsWazuh: User ankur [441252]: 501 ls May 16 13:10:53 bastion LinuxCommandsWazuh: User ankur [441252]: 502 k get pods | grep nitrox May 16 13:10:59 bastion LinuxCommandsWazuh: User ankur [441252]: 502 k get pods | grep nitrox May 16 13:15:32 bastion LinuxCommandsWazuh: User ankur [445795]: 500 byobu May 16 13:15:41 bastion LinuxCommandsWazuh: User ankur [445795]: 501 k get configmaps May 16 13:16:17 bastion LinuxCommandsWazuh: User ankur [445795]: 502 k edit configmaps nitrox-ck-config May 16 13:41:10 bastion LinuxCommandsWazuh: User ankur [441252]: 503 k exec -it nitrox-dramatiq-69755cc697-78znz bash May 16 13:49:23 bastion LinuxCommandsWazuh: User ankur [420539]: 502 k logs -f nitrox-dramatiq-69755cc697-78znz May 16 13:49:24 bastion LinuxCommandsWazuh: message repeated 16 times: [ User ankur [420539]: 502 k logs -f nitrox-dramatiq-69755cc697-78znz] May 16 13:49:42 bastion LinuxCommandsWazuh: User ankur [420539]: 503 k get pods | grep nitrox May 16 13:49:50 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [420539]: 503 k get pods | grep nitrox] May 16 13:50:46 bastion LinuxCommandsWazuh: User ankur [420539]: 504 k exec -it nitrox-dramatiq-7458db7566-kwbh6 bash May 16 13:50:49 bastion LinuxCommandsWazuh: User ankur [420539]: 505 k get pods | grep nitrox May 16 13:50:55 bastion LinuxCommandsWazuh: User ankur [420539]: 505 k get pods | grep nitrox May 16 14:03:49 bastion LinuxCommandsWazuh: User ankur [420539]: 506 k exec -it nitrox-dj-5d7bf9c99-krgcb bash May 16 14:04:33 bastion LinuxCommandsWazuh: User ankur [420539]: 507 k get pods | grep nitrox May 16 14:05:05 bastion LinuxCommandsWazuh: User ankur [420539]: 508 k exec -it nitrox-dj-5b58579c6d-5gp7v bash May 16 14:05:06 bastion LinuxCommandsWazuh: User ankur [420539]: 509 k get pods | grep nitrox May 16 14:05:41 bastion LinuxCommandsWazuh: User ankur [420539]: 510 k exec -it nitrox-dramatiq-f559cbd65-qcm5p bash May 16 14:05:57 bastion LinuxCommandsWazuh: User ankur [420539]: 511 k get pods | grep nitrox May 16 14:17:29 bastion LinuxCommandsWazuh: User ubuntu [508084]: 745 exit May 16 14:17:33 bastion LinuxCommandsWazuh: User ayush [508155]: May 16 14:17:33 bastion LinuxCommandsWazuh: User ayush [508155]: 1 ls May 16 14:17:34 bastion LinuxCommandsWazuh: User ayush [508155]: 2 cd May 16 14:17:37 bastion LinuxCommandsWazuh: User ayush [508155]: 3 docker ps May 16 14:17:42 bastion LinuxCommandsWazuh: User ayush [508155]: 4 kubectl get pods May 16 14:17:57 bastion LinuxCommandsWazuh: User ubuntu [508084]: 746 sudo su ayush May 16 14:18:02 bastion LinuxCommandsWazuh: User ubuntu [508084]: 747 cd .. May 16 14:18:03 bastion LinuxCommandsWazuh: User ubuntu [508084]: 748 ls May 16 14:18:15 bastion LinuxCommandsWazuh: User gojo-satoru [508875]: 40 sudo su - ubuntu May 16 14:18:15 bastion LinuxCommandsWazuh: User gojo-satoru [508875]: 41 cd May 16 14:18:16 bastion LinuxCommandsWazuh: User gojo-satoru [508875]: 42 ls May 16 14:18:19 bastion LinuxCommandsWazuh: User gojo-satoru [508875]: 43 history May 16 14:19:02 bastion LinuxCommandsWazuh: User ubuntu [508084]: 749 sudo su gojo-satoru May 16 14:19:05 bastion LinuxCommandsWazuh: User ayush [509632]: 5 exit May 16 14:19:08 bastion LinuxCommandsWazuh: User ayush [509632]: 6 gcloud auth activate-service-account --key-file=/home/ubuntu/service-account-key.json May 16 14:19:12 bastion LinuxCommandsWazuh: User ayush [509632]: 7 gcloud container clusters get-credentials github-runner --zone asia-south2-a --project nitrox-415207cdl May 16 14:19:12 bastion LinuxCommandsWazuh: User ayush [509632]: 8 cd May 16 14:19:13 bastion LinuxCommandsWazuh: User ayush [509632]: ls May 16 14:19:14 bastion LinuxCommandsWazuh: User ayush [509632]: 10 cd .. May 16 14:19:15 bastion LinuxCommandsWazuh: User ayush [509632]: 11 ls May 16 14:19:30 bastion LinuxCommandsWazuh: User ayush [509632]: 12 gcloud auth activate-service-account --key-file=/home/service.json May 16 14:19:36 bastion LinuxCommandsWazuh: User ayush [509632]: 13 kubectl get all May 16 14:19:47 bastion LinuxCommandsWazuh: User ayush [509632]: 14 gcloud container clusters get-credentials github-runner --zone asia-south2-a --project nitrox-415207 May 16 14:19:55 bastion LinuxCommandsWazuh: User ayush [509632]: 14 gcloud container clusters get-credentials github-runner --zone asia-south2-a --project nitrox-415207 May 16 14:19:56 bastion LinuxCommandsWazuh: User ubuntu [508084]: 750 sudo su ayush May 16 14:20:05 bastion LinuxCommandsWazuh: User ubuntu [508084]: 750 sudo su ayush May 16 14:20:06 bastion LinuxCommandsWazuh: User ayush [510805]: 15 exit May 16 14:20:08 bastion LinuxCommandsWazuh: User ayush [510805]: 16 gcloud container clusters get-credentials nitrox-production --zone asia-south2-b --project nitrox-436511 May 16 14:20:09 bastion LinuxCommandsWazuh: User ayush [510805]: 17 cd May 16 14:20:09 bastion LinuxCommandsWazuh: User ayush [510805]: 18 ls May 16 14:20:15 bastion LinuxCommandsWazuh: User ayush [510805]: 19 kubectl get pods May 16 14:20:44 bastion LinuxCommandsWazuh: User ayush [510805]: 20 kubectl config set-context --current --namespace=nitrox-production May 16 14:20:56 bastion LinuxCommandsWazuh: User ayush [510805]: 21 kubectl get pods May 16 14:20:59 bastion LinuxCommandsWazuh: User ubuntu [508084]: 750 sudo su ayush May 16 14:21:00 bastion LinuxCommandsWazuh: User ubuntu [508084]: 751 ls May 16 14:21:01 bastion LinuxCommandsWazuh: User ubuntu [508084]: 752 cd May 16 14:21:02 bastion LinuxCommandsWazuh: User ubuntu [508084]: 753 ls May 16 14:21:14 bastion LinuxCommandsWazuh: User ubuntu [508084]: 754 cp Makefile README.md /home/ayush/ May 16 14:21:20 bastion LinuxCommandsWazuh: User ubuntu [508084]: 755 sudo cp Makefile README.md /home/ayush/ May 16 14:21:24 bastion LinuxCommandsWazuh: User ayush [512147]: 22 exit May 16 14:21:24 bastion LinuxCommandsWazuh: User ayush [512147]: 23 ls May 16 14:21:25 bastion LinuxCommandsWazuh: User ayush [512147]: 24 cd May 16 14:21:25 bastion LinuxCommandsWazuh: User ayush [512147]: 25 ls May 16 14:21:28 bastion LinuxCommandsWazuh: User ayush [512147]: 26 cat Makefile May 16 14:21:34 bastion ubuntu: root@ [512353]: exit [0] May 16 14:21:36 bastion LinuxCommandsWazuh: User ayush [512147]: 27 sudo su May 16 14:22:34 bastion LinuxCommandsWazuh: User ayush [512147]: 28 getent group google-sudoers May 16 14:23:15 bastion LinuxCommandsWazuh: User ayush [512147]: 29 sudo gpasswd -d ayush google-sudoers May 16 14:23:15 bastion LinuxCommandsWazuh: User ayush [512147]: 30 sudo gpasswd -d mohtashim google-sudoers May 16 14:23:15 bastion LinuxCommandsWazuh: User ayush [512147]: 31 sudo gpasswd -d anshika google-sudoers May 16 14:23:15 bastion LinuxCommandsWazuh: User ayush [512147]: 32 sudo gpasswd -d adil google-sudoers May 16 14:23:15 bastion LinuxCommandsWazuh: User ayush [512147]: 33 sudo gpasswd -d ankur google-sudoers May 16 14:23:18 bastion ubuntu: root@ [514035]: exit [0] May 16 14:23:19 bastion LinuxCommandsWazuh: User ayush [512147]: 34 sudo su May 16 14:23:21 bastion LinuxCommandsWazuh: User ubuntu [508084]: 756 sudo su ayush May 16 14:23:22 bastion LinuxCommandsWazuh: User ayush [514125]: 35 exit May 16 14:23:23 bastion LinuxCommandsWazuh: User ayush [514125]: 36 cd May 16 14:23:26 bastion LinuxCommandsWazuh: User ayush [514125]: 37 sudo su May 16 14:23:28 bastion LinuxCommandsWazuh: User ubuntu [508084]: 756 sudo su ayush May 16 14:49:32 bastion LinuxCommandsWazuh: User ankur [420539]: 511 k get pods | grep nitrox May 16 14:52:33 bastion LinuxCommandsWazuh: User ankur [543141]: 507 exit May 16 14:52:41 bastion LinuxCommandsWazuh: User ankur [543141]: 508 ls May 16 14:52:44 bastion LinuxCommandsWazuh: User ankur [543141]: 509 k get pods May 16 14:57:55 bastion LinuxCommandsWazuh: User ayush [548825]: 38 exit May 16 14:57:59 bastion LinuxCommandsWazuh: User ayush [548825]: 39 ls May 16 14:58:12 bastion LinuxCommandsWazuh: User ayush [548825]: 40 vim Makefile May 16 14:59:21 bastion LinuxCommandsWazuh: User ayush [548825]: 41 vim README.md May 16 14:59:22 bastion LinuxCommandsWazuh: User ayush [548825]: 42 ks May 16 14:59:29 bastion LinuxCommandsWazuh: User ayush [548825]: 43 kubectl get pods May 16 14:59:35 bastion LinuxCommandsWazuh: User ayush [548825]: 44 ll May 16 14:59:46 bastion LinuxCommandsWazuh: User ayush [548825]: 45 internal May 16 15:00:00 bastion LinuxCommandsWazuh: User ayush [548825]: 46 vim README.md May 16 15:00:03 bastion LinuxCommandsWazuh: User ayush [548825]: 47 internal May 16 15:00:22 bastion LinuxCommandsWazuh: User ayush [548825]: 48 vim .bashrc May 16 15:01:01 bastion LinuxCommandsWazuh: User ayush [548825]: 49 ls May 16 15:01:07 bastion LinuxCommandsWazuh: User ayush [548825]: 50 kubetail cookie-cutter | pv -L 2m > cookie-cutter-06-05.txt May 16 15:01:29 bastion LinuxCommandsWazuh: User ayush [548825]: 51 sudo apt install pv May 16 15:01:32 bastion LinuxCommandsWazuh: User ayush [548825]: 52 apt install pv May 16 15:01:51 bastion LinuxCommandsWazuh: User ayush [548825]: 53 sudo apt install pv May 16 15:03:15 bastion LinuxCommandsWazuh: User ayush [548825]: 54 sudo su - devyanshu May 16 15:03:36 bastion LinuxCommandsWazuh: User ayush [548825]: 55 su - rihan May 16 15:11:27 bastion LinuxCommandsWazuh: User ubuntu [563174]: 757 exit May 16 15:12:00 bastion LinuxCommandsWazuh: User ubuntu [563174]: 758 sudo apt install pv May 16 15:12:28 bastion LinuxCommandsWazuh: User ayush [564498]: 38 exit May 16 15:12:30 bastion LinuxCommandsWazuh: User ayush [564498]: 39 ls May 16 15:12:33 bastion LinuxCommandsWazuh: User ayush [564498]: 40 ll May 16 15:13:13 bastion LinuxCommandsWazuh: User ubuntu [565298]: 757 exit May 16 15:13:13 bastion LinuxCommandsWazuh: User ubuntu [565298]: 757 exit May 16 15:13:14 bastion LinuxCommandsWazuh: User ubuntu [565298]: 758 ls May 16 15:13:23 bastion LinuxCommandsWazuh: User ayush [565477]: 38 exit May 16 15:13:24 bastion LinuxCommandsWazuh: User ayush [565477]: 39 cd May 16 15:13:25 bastion LinuxCommandsWazuh: User ayush [565477]: 40 ls May 16 15:13:27 bastion LinuxCommandsWazuh: User ayush [565477]: 41 cd .ssh/ May 16 15:13:32 bastion LinuxCommandsWazuh: User ayush [565477]: 42 sudo vi authorized_keys May 16 15:13:47 bastion LinuxCommandsWazuh: User ayush [565477]: 43 vi authorized_keys May 16 15:14:26 bastion LinuxCommandsWazuh: User ayush [565477]: 44 wq May 16 15:14:38 bastion LinuxCommandsWazuh: User ayush [565477]: 45 vi authorized_keys May 16 15:14:40 bastion LinuxCommandsWazuh: User ubuntu [565298]: 759 sudo su ayush May 16 15:14:41 bastion LinuxCommandsWazuh: User ayush [566702]: 46 exit May 16 15:14:56 bastion LinuxCommandsWazuh: User ayush [567022]: 46 exit May 16 15:16:09 bastion LinuxCommandsWazuh: User ayush [566702]: 47 ls May 16 15:16:11 bastion LinuxCommandsWazuh: User ayush [566702]: 48 cd May 16 15:16:12 bastion LinuxCommandsWazuh: User ayush [566702]: 49 ls May 16 15:16:13 bastion LinuxCommandsWazuh: User ayush [566702]: 50 cd May 16 15:16:13 bastion LinuxCommandsWazuh: User ayush [566702]: 51 ls May 16 15:16:14 bastion LinuxCommandsWazuh: User ayush [566702]: 52 cd mnt/ May 16 15:16:15 bastion LinuxCommandsWazuh: User ayush [566702]: 53 ls May 16 15:16:16 bastion LinuxCommandsWazuh: User ayush [566702]: 54 cd .. May 16 15:17:08 bastion LinuxCommandsWazuh: User ayush [566702]: 54 cd .. May 16 15:17:08 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ayush [566702]: 54 cd ..] May 16 15:17:11 bastion LinuxCommandsWazuh: User ayush [566702]: 55 ls May 16 15:17:12 bastion LinuxCommandsWazuh: User ayush [566702]: 56 cd mnt/ May 16 15:17:13 bastion LinuxCommandsWazuh: User ayush [566702]: 57 ls May 16 15:17:33 bastion LinuxCommandsWazuh: User ayush [566702]: 58 sudo usermod -aG google-sudoers ayush May 16 15:17:36 bastion LinuxCommandsWazuh: User ubuntu [565298]: 759 sudo su ayush May 16 15:17:40 bastion LinuxCommandsWazuh: User ubuntu [565298]: 760 sudo usermod -aG google-sudoers ayush May 16 15:17:44 bastion LinuxCommandsWazuh: User ayush [570484]: 59 exit May 16 15:17:44 bastion LinuxCommandsWazuh: User ayush [570484]: 60 cd May 16 15:17:45 bastion LinuxCommandsWazuh: User ayush [570484]: 61 ls May 16 15:17:47 bastion ubuntu: root@ [570560]: exit [0] May 16 15:17:49 bastion LinuxCommandsWazuh: User ayush [570484]: 62 sudo su May 16 15:22:19 bastion LinuxCommandsWazuh: User ankur [574775]: 510 exit May 16 15:22:48 bastion LinuxCommandsWazuh: User ankur [574775]: 511 k get configmaps May 16 15:23:06 bastion LinuxCommandsWazuh: User ankur [574775]: 512 k get configmaps May 16 15:23:07 bastion LinuxCommandsWazuh: User ankur [574775]: 512 k get configmaps May 16 15:23:12 bastion LinuxCommandsWazuh: User ankur [574775]: 513 ls May 16 15:23:12 bastion LinuxCommandsWazuh: User ankur [574775]: 513 ls May 16 15:23:25 bastion LinuxCommandsWazuh: User ankur [574775]: 514 k get configmaps May 16 15:24:27 bastion LinuxCommandsWazuh: User ankur [574775]: 515 k edit configmaps nitrox-ck-config May 16 15:24:28 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [574775]: 515 k edit configmaps nitrox-ck-config] May 16 15:25:39 bastion LinuxCommandsWazuh: User ayush [570484]: 63 ls May 16 15:25:43 bastion LinuxCommandsWazuh: User ayush [570484]: 64 df -h May 16 15:25:46 bastion LinuxCommandsWazuh: User ayush [570484]: 65 cd .. May 16 15:25:50 bastion LinuxCommandsWazuh: User ayush [570484]: 66 ls May 16 15:25:50 bastion LinuxCommandsWazuh: User ayush [570484]: 67 cd May 16 15:25:50 bastion LinuxCommandsWazuh: User ayush [570484]: 68 ls May 16 15:25:51 bastion LinuxCommandsWazuh: User ayush [570484]: 69 cd /mnt/ May 16 15:25:52 bastion LinuxCommandsWazuh: User ayush [570484]: 70 ls May 16 15:26:13 bastion LinuxCommandsWazuh: User ayush [570484]: 70 ls May 16 15:26:19 bastion LinuxCommandsWazuh: User ayush [570484]: 71 cd mongo/ May 16 15:26:20 bastion LinuxCommandsWazuh: User ayush [570484]: 72 ls May 16 15:26:22 bastion LinuxCommandsWazuh: User ayush [570484]: 73 cd .. May 16 15:26:23 bastion LinuxCommandsWazuh: User ayush [570484]: 74 ls May 16 15:26:27 bastion LinuxCommandsWazuh: User ayush [570484]: 75 cd backup/ May 16 15:26:28 bastion LinuxCommandsWazuh: User ayush [570484]: 76 ls May 16 15:26:31 bastion LinuxCommandsWazuh: User ayush [570484]: 77 cd .. May 16 15:26:34 bastion LinuxCommandsWazuh: message repeated 7 times: [ User ayush [570484]: 77 cd ..] May 16 15:26:34 bastion LinuxCommandsWazuh: User ayush [570484]: 78 ls May 16 15:26:36 bastion LinuxCommandsWazuh: User ayush [570484]: 79 cd May 16 15:26:38 bastion LinuxCommandsWazuh: User ayush [570484]: 80 ls May 16 15:26:55 bastion LinuxCommandsWazuh: User ankur [579617]: 516 exit May 16 15:27:31 bastion LinuxCommandsWazuh: User ankur [579617]: 517 k edit configmaps nitrox-ck-config May 16 15:27:55 bastion LinuxCommandsWazuh: User ayush [548825]: 56 ls May 16 15:29:59 bastion LinuxCommandsWazuh: User ayush [548825]: 56 ls May 16 15:30:34 bastion LinuxCommandsWazuh: User ayush [548825]: 57 ./top_10_log.py cookie-cutter-16-05-1.txt May 16 15:30:46 bastion LinuxCommandsWazuh: User ayush [548825]: 58 ./top_10_log.py cookie-cutter-16-05-1.txt 10 May 16 15:30:55 bastion LinuxCommandsWazuh: User ayush [548825]: 59 pwd May 16 15:32:27 bastion LinuxCommandsWazuh: User ayush [548825]: 60 ls May 16 15:32:33 bastion LinuxCommandsWazuh: User ayush [548825]: 61 ./mnt/ May 16 15:32:40 bastion LinuxCommandsWazuh: User ayush [548825]: 62 cd mnt/ May 16 15:32:41 bastion LinuxCommandsWazuh: User ayush [548825]: 63 ls May 16 15:32:48 bastion LinuxCommandsWazuh: User ayush [548825]: 64 cd .. May 16 15:32:49 bastion LinuxCommandsWazuh: User ayush [548825]: 65 ls May 16 16:49:25 bastion LinuxCommandsWazuh: User ankur [419685]: 504 k logs -f house-of-click-789594f9df-6hrjv | grep -i "USER_DATA_EXPORT>>" May 16 17:00:04 bastion LinuxCommandsWazuh: User ankur [419540]: 500 byobu May 16 17:12:26 bastion LinuxCommandsWazuh: User adil [673282]: 3 byobu May 16 17:12:35 bastion LinuxCommandsWazuh: User adil [673503]: 3 byobu May 16 17:13:04 bastion LinuxCommandsWazuh: User adil [673503]: 4 kubectl get configmaps May 16 17:14:15 bastion LinuxCommandsWazuh: User adil [673503]: 5 kubectl edit configmaps nitrox-ck-config May 16 18:49:43 bastion LinuxCommandsWazuh: User ankur [420539]: 512 k logs -f nitrox-dramatiq-7c89d9bcc8-pnd57 May 16 18:49:44 bastion LinuxCommandsWazuh: message repeated 159 times: [ User ankur [420539]: 512 k logs -f nitrox-dramatiq-7c89d9bcc8-pnd57] May 16 19:48:18 bastion LinuxCommandsWazuh: User ankur [706664]: 517 exit May 16 19:48:20 bastion LinuxCommandsWazuh: User ankur [706664]: 518 ls May 16 20:49:31 bastion LinuxCommandsWazuh: User ankur [419685]: 504 k logs -f house-of-click-789594f9df-6hrjv | grep -i "USER_DATA_EXPORT>>" May 16 20:49:32 bastion LinuxCommandsWazuh: message repeated 113 times: [ User ankur [419685]: 504 k logs -f house-of-click-789594f9df-6hrjv | grep -i "USER_DATA_EXPORT>>"]