MoodyMudit
07/28/2021, 7:01 AM{
"counter": 0,
"unixTime": 1627455088,
"atime": "1627454699",
"auid": "1000",
"btime": "0",
"cmdline": "python3",
"ctime": "1610552918",
"cwd": "/",
"egid": "0",
"euid": "0",
"fsgid": "0",
"fsuid": "0",
"gid": "0",
"mode": "0100755",
"mtime": "1605545975",
"owner_gid": "0",
"owner_uid": "0",
"parent": "7041",
"path": "/usr/bin/python3.6",
"pid": "9888",
"sgid": "0",
"suid": "0",
"syscall": "execve",
"time": "1627454887",
"uid": "0",
"uptime": "16902318"
}
Stefano Bonicatti
08/05/2021, 3:41 PMexit
syscall, so every process event you see is about a process starting.MoodyMudit
08/17/2021, 10:03 AM