d10a2d0277129e5822360460b74a2d41685c61dc2260dc276117ae5df81810d6

Analysis

max time kernel
23s
platform
debian-9_armhf
resource
debian9-armhf-20260127-en
resource tags

arch:armhfimage:debian9-armhf-20260127-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
04/04/2026, 00:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
xx.sh
Size 16KB
Sample260404-ak5tyact8k
SHA256 d10a2d0277129e5822360460b74a2d41685c61dc2260dc276117ae5df81810d6
MD5 95f028cf87a1f06d45f345a644a69eb3
SHA1 123e5a1f34228a36032d8d365250991d763146ce
SHA512 66440c849ffc59f9e27dbf8dc316aa4c70a0402aee939c89b5cc9c539b69a79130a1c5b0b641dae9d4ffc7b576b5d96723c4f13137fcda2cdfb61c42d7f16bbc
SSDEEP 384:rfcMihlH2wx2vUaQa5/eN86704s80ooJQYgykWT4yCtvUsDjdWOoJw+O:zcg7YJDj8OoJw+O
TLSH
T10472218EB011ED74295DC4B59CE2287D602BA00A4D623F10B45C7E786B9DA05F7B9BFC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery privilege_escalation

Malware Config

Signatures

Flushes firewall rules 1 TTPs 1 IoCs

Flushes/ disables firewall rules inside the Linux kernel.

defense_evasion

Disable or Modify System Firewall

T1562.004

pid	Process
664	iptables

Abuse Elevation Control Mechanism: Sudo and Sudo Caching 1 TTPs 1 IoCs

Abuse sudo or cached sudo credentials to execute code.

privilege_escalation defense_evasion

Sudo and Sudo Caching

T1548.003

pid	Process
1889	sudo

Attempts to change immutable files 8 IoCs

Modifies inode attributes on the filesystem to allow changing of immutable files.

pid	Process
1917	xargs
1922	xargs
1927	xargs
648	chattr
656	chattr
660	chattr
1892	uname
1912	xargs

Enumerates running processes
Discovers information about currently running processes on the system

Reads CPU attributes 1 TTPs 12 IoCs

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/41/stat	ps
File opened for reading	/proc/579/cmdline	ps
File opened for reading	/proc/41/status	pkill
File opened for reading	/proc/27/cmdline	pkill
File opened for reading	/proc/22/cmdline	pkill
File opened for reading	/proc/9/cmdline	pkill
File opened for reading	/proc/109/status	pkill
File opened for reading	/proc/11/cmdline	ps
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/581/cmdline	pkill
File opened for reading	/proc/11/cmdline	pkill
File opened for reading	/proc/28/status	pkill
File opened for reading	/proc/108/cmdline	ps
File opened for reading	/proc/16/status	ps
File opened for reading	/proc/159/stat	ps
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/1405/cmdline	pkill
File opened for reading	/proc/1901/status	pkill
File opened for reading	/proc/139/cmdline	pkill
File opened for reading	/proc/2/cmdline	ps
File opened for reading	/proc/16/status	ps
File opened for reading	/proc/284/status	ps
File opened for reading	/proc/21/status	pkill
File opened for reading	/proc/137/cmdline	pkill
File opened for reading	/proc/285/status	pkill
File opened for reading	/proc/1926/status	ps
File opened for reading	/proc/8/status	pkill
File opened for reading	/proc/13/cmdline	pkill
File opened for reading	/proc/15/cmdline	ps
File opened for reading	/proc/137/status	pkill
File opened for reading	/proc/297/cmdline	ps
File opened for reading	/proc/9/status	pkill
File opened for reading	/proc/135/status	pkill
File opened for reading	/proc/643/status	pkill
File opened for reading	/proc/22/status	pkill
File opened for reading	/proc/632/cmdline	ps
File opened for reading	/proc/10/cmdline	ps
File opened for reading	/proc/16/cmdline	ps
File opened for reading	/proc/43/stat	ps
File opened for reading	/proc/6/status	pkill
File opened for reading	/proc/169/stat	ps
File opened for reading	/proc/320/status	pkill
File opened for reading	/proc/15/status	pkill
File opened for reading	/proc/169/cmdline	pkill
File opened for reading	/proc/21/status	pkill
File opened for reading	/proc/9/stat	ps
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/581/status	pkill
File opened for reading	/proc/106/status	pkill
File opened for reading	/proc/12/status	pkill
File opened for reading	/proc/290/status	pkill
File opened for reading	/proc/296/cmdline	pkill
File opened for reading	/proc/639/cmdline	pkill
File opened for reading	/proc/639/cmdline	ps
File opened for reading	/proc/filesystems	pkill
File opened for reading	/proc/169/status	pkill
File opened for reading	/proc/41/status	pkill
File opened for reading	/proc/21/cmdline	pkill
File opened for reading	/proc/1405/cmdline	pkill
File opened for reading	/proc/579/status	ps
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/98/cmdline	pkill
File opened for reading	/proc/7/status	pkill

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
1808	ls

/tmp/xx.sh
/tmp/xx.sh
1⤵
PID:643
- /usr/bin/chattr
  chattr -i /etc/ld.so.preload
  2⤵
  - Attempts to change immutable files
  PID:648
- /bin/rm
  rm -f /etc/ld.so.preload
  2⤵
  PID:653
- /usr/bin/chattr
  chattr -R -ia /var/spool/cron
  2⤵
  - Attempts to change immutable files
  PID:656
- /usr/bin/chattr
  chattr -ia /etc/crontab
  2⤵
  - Attempts to change immutable files
  PID:660
- /sbin/iptables
  iptables -F
  2⤵
  - Flushes firewall rules
  PID:664
- /bin/rm
  rm -rf /usr/bin/nginxd
  2⤵
  PID:673
- /bin/rm
  rm -rf /usr/bin/nginxd
  2⤵
  PID:675
- /bin/rm
  rm -rf /usr/bin/softirq
  2⤵
  PID:676
- /bin/ls
  ls -latrh /proc/1
  2⤵
  PID:680
- /bin/grep
  grep exe
  2⤵
  PID:681
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:684
- /bin/grep
  grep -q systemd
  2⤵
  PID:686
- /bin/grep
  grep -q deleted
  2⤵
  PID:688
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:690
- /bin/grep
  grep exe
  2⤵
  PID:694
- /bin/ls
  ls -latrh /proc/10
  2⤵
  - Reads runtime system information
  PID:693
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:696
- /bin/grep
  grep -q systemd
  2⤵
  PID:698
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:700
- /bin/ls
  ls -latrh /proc/106
  2⤵
  PID:702
- /bin/grep
  grep exe
  2⤵
  PID:703
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:705
- /bin/grep
  grep -q systemd
  2⤵
  PID:707
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:709
- /bin/ls
  ls -latrh /proc/108
  2⤵
  PID:711
- /bin/grep
  grep exe
  2⤵
  PID:712
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:714
- /bin/grep
  grep -q systemd
  2⤵
  PID:716
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:718
- /bin/grep
  grep exe
  2⤵
  PID:721
- /bin/ls
  ls -latrh /proc/109
  2⤵
  PID:720
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:723
- /bin/grep
  grep -q systemd
  2⤵
  PID:725
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:727
- /bin/ls
  ls -latrh /proc/11
  2⤵
  PID:729
- /bin/grep
  grep exe
  2⤵
  PID:730
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:732
- /bin/grep
  grep -q systemd
  2⤵
  PID:734
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:736
- /bin/ls
  ls -latrh /proc/12
  2⤵
  PID:738
- /bin/grep
  grep exe
  2⤵
  PID:739
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:741
- /bin/grep
  grep -q systemd
  2⤵
  PID:743
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:745
- /bin/grep
  grep exe
  2⤵
  PID:748
- /bin/ls
  ls -latrh /proc/13
  2⤵
  PID:747
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:750
- /bin/grep
  grep -q systemd
  2⤵
  PID:752
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:754
- /bin/ls
  ls -latrh /proc/135
  2⤵
  PID:756
- /bin/grep
  grep exe
  2⤵
  PID:757
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:759
- /bin/grep
  grep -q systemd
  2⤵
  PID:761
- /bin/grep
  grep -q deleted
  2⤵
  PID:763
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:765
- /bin/ls
  ls -latrh /proc/137
  2⤵
  PID:767
- /bin/grep
  grep exe
  2⤵
  PID:768
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:770
- /bin/grep
  grep -q systemd
  2⤵
  PID:772
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:774
- /bin/ls
  ls -latrh /proc/139
  2⤵
  PID:776
- /bin/grep
  grep exe
  2⤵
  PID:777
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:779
- /bin/grep
  grep -q systemd
  2⤵
  PID:781
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:783
- /bin/ls
  ls -latrh /proc/14
  2⤵
  PID:787
- /bin/grep
  grep exe
  2⤵
  PID:788
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:792
- /bin/grep
  grep -q systemd
  2⤵
  PID:794
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:798
- /bin/grep
  grep exe
  2⤵
  PID:802
- /bin/ls
  ls -latrh /proc/15
  2⤵
  PID:801
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:805
- /bin/grep
  grep -q systemd
  2⤵
  PID:808
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:811
- /bin/ls
  ls -latrh /proc/159
  2⤵
  PID:814
- /bin/grep
  grep exe
  2⤵
  PID:815
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:819
- /bin/grep
  grep -q systemd
  2⤵
  PID:822
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:824
- /bin/ls
  ls -latrh /proc/16
  2⤵
  PID:828
- /bin/grep
  grep exe
  2⤵
  PID:829
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:832
- /bin/grep
  grep -q systemd
  2⤵
  PID:835
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:838
- /bin/grep
  grep exe
  2⤵
  PID:842
- /bin/ls
  ls -latrh /proc/169
  2⤵
  PID:841
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:846
- /bin/grep
  grep -q systemd
  2⤵
  PID:848
- /bin/grep
  grep -q deleted
  2⤵
  PID:851
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:854
- /bin/ls
  ls -latrh /proc/17
  2⤵
  PID:857
- /bin/grep
  grep exe
  2⤵
  PID:859
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:862
- /bin/grep
  grep -q systemd
  2⤵
  PID:865
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:868
- /bin/ls
  ls -latrh /proc/18
  2⤵
  PID:873
- /bin/grep
  grep exe
  2⤵
  PID:874
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:877
- /bin/grep
  grep -q systemd
  2⤵
  PID:883
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:886
- /bin/ls
  ls -latrh /proc/19
  2⤵
  PID:889
- /bin/grep
  grep exe
  2⤵
  PID:890
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:893
- /bin/grep
  grep -q systemd
  2⤵
  PID:897
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:900
- /bin/grep
  grep exe
  2⤵
  PID:904
- /bin/ls
  ls -latrh /proc/2
  2⤵
  PID:903
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:906
- /bin/grep
  grep -q systemd
  2⤵
  PID:908
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:910
- /bin/ls
  ls -latrh /proc/20
  2⤵
  PID:913
- /bin/grep
  grep exe
  2⤵
  PID:914
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:916
- /bin/grep
  grep -q systemd
  2⤵
  PID:918
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:920
- /bin/ls
  ls -latrh /proc/208
  2⤵
  PID:922
- /bin/grep
  grep exe
  2⤵
  PID:923
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:925
- /bin/grep
  grep -q systemd
  2⤵
  PID:927
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:929
- /bin/grep
  grep exe
  2⤵
  PID:932
- /bin/ls
  ls -latrh /proc/21
  2⤵
  PID:931
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:934
- /bin/grep
  grep -q systemd
  2⤵
  PID:936
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:938
- /bin/grep
  grep exe
  2⤵
  PID:941
- /bin/ls
  ls -latrh /proc/22
  2⤵
  PID:940
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:943
- /bin/grep
  grep -q systemd
  2⤵
  PID:945
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:947
- /bin/grep
  grep exe
  2⤵
  PID:950
- /bin/ls
  ls -latrh /proc/221
  2⤵
  PID:949
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:952
- /bin/grep
  grep -q systemd
  2⤵
  PID:954
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:956
- /bin/grep
  grep exe
  2⤵
  PID:959
- /bin/ls
  ls -latrh /proc/23
  2⤵
  PID:958
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:961
- /bin/grep
  grep -q systemd
  2⤵
  PID:963
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:965
- /bin/grep
  grep exe
  2⤵
  PID:968
- /bin/ls
  ls -latrh /proc/24
  2⤵
  - Reads runtime system information
  PID:967
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:970
- /bin/grep
  grep -q systemd
  2⤵
  PID:972
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:974
- /bin/ls
  ls -latrh /proc/25
  2⤵
  - Reads runtime system information
  PID:976
- /bin/grep
  grep exe
  2⤵
  PID:977
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:979
- /bin/grep
  grep -q systemd
  2⤵
  PID:981
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:983
- /bin/ls
  ls -latrh /proc/26
  2⤵
  PID:985
- /bin/grep
  grep exe
  2⤵
  PID:986
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:988
- /bin/grep
  grep -q systemd
  2⤵
  PID:990
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:992
- /bin/grep
  grep exe
  2⤵
  PID:995
- /bin/ls
  ls -latrh /proc/27
  2⤵
  PID:994
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:998
- /bin/grep
  grep -q systemd
  2⤵
  PID:1001
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1004
- /bin/grep
  grep exe
  2⤵
  PID:1008
- /bin/ls
  ls -latrh /proc/28
  2⤵
  PID:1007
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1012
- /bin/grep
  grep -q systemd
  2⤵
  PID:1015
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1018
- /bin/grep
  grep exe
  2⤵
  PID:1022
- /bin/ls
  ls -latrh /proc/284
  2⤵
  PID:1021
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1025
- /bin/grep
  grep -q systemd
  2⤵
  PID:1029
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1031
- /bin/ls
  ls -latrh /proc/285
  2⤵
  PID:1035
- /bin/grep
  grep exe
  2⤵
  PID:1036
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1039
- /bin/grep
  grep -q systemd
  2⤵
  PID:1042
- /bin/grep
  grep -q deleted
  2⤵
  PID:1045
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1048
- /bin/ls
  ls -latrh /proc/29
  2⤵
  PID:1051
- /bin/grep
  grep exe
  2⤵
  PID:1052
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1055
- /bin/grep
  grep -q systemd
  2⤵
  PID:1059
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1061
- /bin/ls
  ls -latrh /proc/290
  2⤵
  PID:1065
- /bin/grep
  grep exe
  2⤵
  PID:1066
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1069
- /bin/grep
  grep -q systemd
  2⤵
  PID:1072
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1075
- /bin/ls
  ls -latrh /proc/292
  2⤵
  PID:1078
- /bin/grep
  grep exe
  2⤵
  PID:1079
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1083
- /bin/grep
  grep -q systemd
  2⤵
  PID:1085
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1087
- /bin/ls
  ls -latrh /proc/296
  2⤵
  PID:1089
- /bin/grep
  grep exe
  2⤵
  PID:1090
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1092
- /bin/grep
  grep -q systemd
  2⤵
  PID:1094
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1096
- /bin/ls
  ls -latrh /proc/297
  2⤵
  PID:1098
- /bin/grep
  grep exe
  2⤵
  PID:1099
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1101
- /bin/grep
  grep -q systemd
  2⤵
  PID:1103
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1105
- /bin/grep
  grep exe
  2⤵
  PID:1108
- /bin/ls
  ls -latrh /proc/3
  2⤵
  PID:1107
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1110
- /bin/grep
  grep -q systemd
  2⤵
  PID:1112
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1114
- /bin/grep
  grep exe
  2⤵
  PID:1117
- /bin/ls
  ls -latrh /proc/320
  2⤵
  PID:1116
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1119
- /bin/grep
  grep -q systemd
  2⤵
  PID:1121
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1123
- /bin/grep
  grep exe
  2⤵
  PID:1126
- /bin/ls
  ls -latrh /proc/324
  2⤵
  PID:1125
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1128
- /bin/grep
  grep -q systemd
  2⤵
  PID:1130
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1132
- /bin/grep
  grep exe
  2⤵
  PID:1135
- /bin/ls
  ls -latrh /proc/338
  2⤵
  PID:1134
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1137
- /bin/grep
  grep -q systemd
  2⤵
  PID:1139
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1141
- /bin/grep
  grep exe
  2⤵
  PID:1144
- /bin/ls
  ls -latrh /proc/4
  2⤵
  PID:1143
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1146
- /bin/grep
  grep -q systemd
  2⤵
  PID:1148
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1150
- /bin/grep
  grep exe
  2⤵
  PID:1153
- /bin/ls
  ls -latrh /proc/41
  2⤵
  PID:1152
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1155
- /bin/grep
  grep -q systemd
  2⤵
  PID:1157
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1159
- /bin/grep
  grep exe
  2⤵
  PID:1162
- /bin/ls
  ls -latrh /proc/42
  2⤵
  PID:1161
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1164
- /bin/grep
  grep -q systemd
  2⤵
  PID:1166
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1168
- /bin/grep
  grep exe
  2⤵
  PID:1171
- /bin/ls
  ls -latrh /proc/43
  2⤵
  PID:1170
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1173
- /bin/grep
  grep -q systemd
  2⤵
  PID:1175
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1177
- /bin/ls
  ls -latrh /proc/5
  2⤵
  PID:1179
- /bin/grep
  grep exe
  2⤵
  PID:1180
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1182
- /bin/grep
  grep -q systemd
  2⤵
  PID:1184
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1186
- /bin/ls
  ls -latrh /proc/566
  2⤵
  PID:1188
- /bin/grep
  grep exe
  2⤵
  PID:1189
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1191
- /bin/grep
  grep -q systemd
  2⤵
  PID:1193
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1195
- /bin/grep
  grep exe
  2⤵
  PID:1198
- /bin/ls
  ls -latrh /proc/579
  2⤵
  PID:1197
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1200
- /bin/grep
  grep -q systemd
  2⤵
  PID:1202
- /bin/grep
  grep -q deleted
  2⤵
  PID:1204
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1206
- /bin/grep
  grep exe
  2⤵
  PID:1209
- /bin/ls
  ls -latrh /proc/581
  2⤵
  PID:1208
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1211
- /bin/grep
  grep -q systemd
  2⤵
  PID:1213
- /bin/grep
  grep -q deleted
  2⤵
  PID:1215
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1217
- /bin/grep
  grep exe
  2⤵
  PID:1220
- /bin/ls
  ls -latrh /proc/589
  2⤵
  PID:1219
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1222
- /bin/grep
  grep -q systemd
  2⤵
  PID:1224
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1226
- /bin/grep
  grep exe
  2⤵
  PID:1229
- /bin/ls
  ls -latrh /proc/590
  2⤵
  PID:1228
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1231
- /bin/grep
  grep -q systemd
  2⤵
  PID:1233
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1235
- /bin/grep
  grep exe
  2⤵
  PID:1238
- /bin/ls
  ls -latrh /proc/6
  2⤵
  - Reads runtime system information
  PID:1237
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1240
- /bin/grep
  grep -q systemd
  2⤵
  PID:1242
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1244
- /bin/grep
  grep exe
  2⤵
  PID:1247
- /bin/ls
  ls -latrh /proc/632
  2⤵
  PID:1246
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1249
- /bin/grep
  grep -q systemd
  2⤵
  PID:1251
- /bin/grep
  grep -q deleted
  2⤵
  PID:1253
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1255
- /bin/grep
  grep exe
  2⤵
  PID:1258
- /bin/ls
  ls -latrh /proc/633
  2⤵
  PID:1257
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1260
- /bin/grep
  grep -q systemd
  2⤵
  PID:1262
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1264
- /bin/grep
  grep exe
  2⤵
  PID:1267
- /bin/ls
  ls -latrh /proc/636
  2⤵
  PID:1266
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1269
- /bin/grep
  grep -q systemd
  2⤵
  PID:1271
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1273
- /bin/grep
  grep exe
  2⤵
  PID:1276
- /bin/ls
  ls -latrh /proc/639
  2⤵
  PID:1275
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1278
- /bin/grep
  grep -q systemd
  2⤵
  PID:1280
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1282
- /bin/ls
  ls -latrh /proc/640
  2⤵
  PID:1284
- /bin/grep
  grep exe
  2⤵
  PID:1285
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1287
- /bin/grep
  grep -q systemd
  2⤵
  PID:1289
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1291
- /bin/grep
  grep exe
  2⤵
  PID:1294
- /bin/ls
  ls -latrh /proc/641
  2⤵
  PID:1293
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1296
- /bin/grep
  grep -q systemd
  2⤵
  PID:1298
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1300
- /bin/ls
  ls -latrh /proc/643
  2⤵
  PID:1302
- /bin/grep
  grep exe
  2⤵
  PID:1303
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1305
- /bin/grep
  grep -q systemd
  2⤵
  PID:1307
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1309
- /bin/ls
  ls -latrh /proc/645
  2⤵
  PID:1311
- /bin/grep
  grep exe
  2⤵
  PID:1312
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1314
- /bin/grep
  grep -q systemd
  2⤵
  PID:1316
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1318
- /bin/grep
  grep exe
  2⤵
  PID:1321
- /bin/ls
  ls -latrh /proc/665
  2⤵
  PID:1320
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1323
- /bin/grep
  grep -q systemd
  2⤵
  PID:1325
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1327
- /bin/grep
  grep exe
  2⤵
  PID:1330
- /bin/ls
  ls -latrh /proc/678
  2⤵
  PID:1329
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1332
- /bin/grep
  grep -q systemd
  2⤵
  PID:1334
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1336
- /bin/ls
  ls -latrh /proc/7
  2⤵
  PID:1338
- /bin/grep
  grep exe
  2⤵
  PID:1339
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1341
- /bin/grep
  grep -q systemd
  2⤵
  PID:1343
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1345
- /bin/grep
  grep exe
  2⤵
  PID:1348
- /bin/ls
  ls -latrh /proc/76
  2⤵
  PID:1347
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1350
- /bin/grep
  grep -q systemd
  2⤵
  PID:1352
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1354
- /bin/grep
  grep exe
  2⤵
  PID:1357
- /bin/ls
  ls -latrh /proc/8
  2⤵
  PID:1356
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1359
- /bin/grep
  grep -q systemd
  2⤵
  PID:1361
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1363
- /bin/ls
  ls -latrh /proc/9
  2⤵
  PID:1365
- /bin/grep
  grep exe
  2⤵
  PID:1366
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1368
- /bin/grep
  grep -q systemd
  2⤵
  PID:1370
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1372
- /bin/grep
  grep exe
  2⤵
  PID:1375
- /bin/ls
  ls -latrh /proc/98
  2⤵
  PID:1374
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1377
- /bin/grep
  grep -q systemd
  2⤵
  PID:1379
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1381
- /bin/grep
  grep exe
  2⤵
  PID:1384
- /bin/ls
  ls -latrh /proc/apm
  2⤵
  PID:1383
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1386
- /bin/grep
  grep -q systemd
  2⤵
  PID:1388
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1390
- /bin/grep
  grep exe
  2⤵
  PID:1393
- /bin/ls
  ls -latrh /proc/buddyinfo
  2⤵
  PID:1392
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1396
- /bin/grep
  grep -q systemd
  2⤵
  PID:1398
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1400
- /bin/grep
  grep exe
  2⤵
  PID:1403
- /bin/ls
  ls -latrh /proc/bus
  2⤵
  PID:1402
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1406
- /bin/grep
  grep -q systemd
  2⤵
  PID:1408
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1410
- /bin/grep
  grep exe
  2⤵
  PID:1413
- /bin/ls
  ls -latrh /proc/cgroups
  2⤵
  PID:1412
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1415
- /bin/grep
  grep -q systemd
  2⤵
  PID:1417
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1419
- /bin/grep
  grep exe
  2⤵
  PID:1422
- /bin/ls
  ls -latrh /proc/cmdline
  2⤵
  PID:1421
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1424
- /bin/grep
  grep -q systemd
  2⤵
  PID:1426
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1428
- /bin/ls
  ls -latrh /proc/consoles
  2⤵
  PID:1430
- /bin/grep
  grep exe
  2⤵
  PID:1431
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1433
- /bin/grep
  grep -q systemd
  2⤵
  PID:1435
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1437
- /bin/grep
  grep exe
  2⤵
  PID:1440
- /bin/ls
  ls -latrh /proc/cpu
  2⤵
  PID:1439
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1442
- /bin/grep
  grep -q systemd
  2⤵
  PID:1444
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1446
- /bin/ls
  ls -latrh /proc/cpuinfo
  2⤵
  PID:1448
- /bin/grep
  grep exe
  2⤵
  PID:1449
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1451
- /bin/grep
  grep -q systemd
  2⤵
  PID:1453
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1455
- /bin/grep
  grep exe
  2⤵
  PID:1458
- /bin/ls
  ls -latrh /proc/crypto
  2⤵
  PID:1457
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1460
- /bin/grep
  grep -q systemd
  2⤵
  PID:1462
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1464
- /bin/grep
  grep exe
  2⤵
  PID:1467
- /bin/ls
  ls -latrh /proc/devices
  2⤵
  PID:1466
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1469
- /bin/grep
  grep -q systemd
  2⤵
  PID:1471
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1473
- /bin/ls
  ls -latrh /proc/device-tree
  2⤵
  PID:1475
- /bin/grep
  grep exe
  2⤵
  PID:1476
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1478
- /bin/grep
  grep -q systemd
  2⤵
  PID:1480
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1482
- /bin/grep
  grep exe
  2⤵
  PID:1485
- /bin/ls
  ls -latrh /proc/diskstats
  2⤵
  PID:1484
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1487
- /bin/grep
  grep -q systemd
  2⤵
  PID:1489
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1491
- /bin/grep
  grep exe
  2⤵
  PID:1494
- /bin/ls
  ls -latrh /proc/driver
  2⤵
  PID:1493
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1496
- /bin/grep
  grep -q systemd
  2⤵
  PID:1498
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1500
- /bin/grep
  grep exe
  2⤵
  PID:1503
- /bin/ls
  ls -latrh /proc/execdomains
  2⤵
  PID:1502
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1505
- /bin/grep
  grep -q systemd
  2⤵
  PID:1507
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1509
- /bin/ls
  ls -latrh /proc/fb
  2⤵
  PID:1511
- /bin/grep
  grep exe
  2⤵
  PID:1512
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1514
- /bin/grep
  grep -q systemd
  2⤵
  PID:1516
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1518
- /bin/grep
  grep exe
  2⤵
  PID:1521
- /bin/ls
  ls -latrh /proc/filesystems
  2⤵
  PID:1520
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1523
- /bin/grep
  grep -q systemd
  2⤵
  PID:1525
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1527
- /bin/grep
  grep exe
  2⤵
  PID:1530
- /bin/ls
  ls -latrh /proc/fs
  2⤵
  PID:1529
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1532
- /bin/grep
  grep -q systemd
  2⤵
  PID:1534
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1536
- /bin/ls
  ls -latrh /proc/interrupts
  2⤵
  PID:1538
- /bin/grep
  grep exe
  2⤵
  PID:1539
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1541
- /bin/grep
  grep -q systemd
  2⤵
  PID:1543
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1545
- /bin/grep
  grep exe
  2⤵
  PID:1548
- /bin/ls
  ls -latrh /proc/iomem
  2⤵
  PID:1547
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1550
- /bin/grep
  grep -q systemd
  2⤵
  PID:1552
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1554
- /bin/grep
  grep exe
  2⤵
  PID:1557
- /bin/ls
  ls -latrh /proc/ioports
  2⤵
  PID:1556
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1559
- /bin/grep
  grep -q systemd
  2⤵
  PID:1561
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1563
- /bin/grep
  grep exe
  2⤵
  PID:1566
- /bin/ls
  ls -latrh /proc/irq
  2⤵
  PID:1565
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1568
- /bin/grep
  grep -q systemd
  2⤵
  PID:1570
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1572
- /bin/grep
  grep exe
  2⤵
  PID:1575
- /bin/ls
  ls -latrh /proc/kallsyms
  2⤵
  PID:1574
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1577
- /bin/grep
  grep -q systemd
  2⤵
  PID:1579
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1581
- /bin/grep
  grep exe
  2⤵
  PID:1584
- /bin/ls
  ls -latrh /proc/keys
  2⤵
  PID:1583
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1586
- /bin/grep
  grep -q systemd
  2⤵
  PID:1588
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1590
- /bin/grep
  grep exe
  2⤵
  PID:1593
- /bin/ls
  ls -latrh /proc/key-users
  2⤵
  PID:1592
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1595
- /bin/grep
  grep -q systemd
  2⤵
  PID:1597
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1599
- /bin/grep
  grep exe
  2⤵
  PID:1602
- /bin/ls
  ls -latrh /proc/kmsg
  2⤵
  PID:1601
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1604
- /bin/grep
  grep -q systemd
  2⤵
  PID:1606
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1608
- /bin/ls
  ls -latrh /proc/kpagecgroup
  2⤵
  PID:1610
- /bin/grep
  grep exe
  2⤵
  PID:1611
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1613
- /bin/grep
  grep -q systemd
  2⤵
  PID:1615
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1617
- /bin/ls
  ls -latrh /proc/kpagecount
  2⤵
  PID:1619
- /bin/grep
  grep exe
  2⤵
  PID:1620
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1622
- /bin/grep
  grep -q systemd
  2⤵
  PID:1624
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1626
- /bin/ls
  ls -latrh /proc/kpageflags
  2⤵
  PID:1628
- /bin/grep
  grep exe
  2⤵
  PID:1629
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1631
- /bin/grep
  grep -q systemd
  2⤵
  PID:1633
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1635
- /bin/grep
  grep exe
  2⤵
  PID:1638
- /bin/ls
  ls -latrh /proc/loadavg
  2⤵
  PID:1637
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1640
- /bin/grep
  grep -q systemd
  2⤵
  PID:1642
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1644
- /bin/grep
  grep exe
  2⤵
  PID:1647
- /bin/ls
  ls -latrh /proc/locks
  2⤵
  PID:1646
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1649
- /bin/grep
  grep -q systemd
  2⤵
  PID:1651
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1653
- /bin/ls
  ls -latrh /proc/meminfo
  2⤵
  PID:1655
- /bin/grep
  grep exe
  2⤵
  PID:1656
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1658
- /bin/grep
  grep -q systemd
  2⤵
  PID:1660
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1662
- /bin/ls
  ls -latrh /proc/misc
  2⤵
  PID:1664
- /bin/grep
  grep exe
  2⤵
  PID:1665
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1667
- /bin/grep
  grep -q systemd
  2⤵
  PID:1669
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1671
- /bin/grep
  grep exe
  2⤵
  PID:1674
- /bin/ls
  ls -latrh /proc/modules
  2⤵
  PID:1673
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1676
- /bin/grep
  grep -q systemd
  2⤵
  PID:1678
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1680
- /bin/grep
  grep exe
  2⤵
  PID:1683
- /bin/ls
  ls -latrh /proc/mounts
  2⤵
  PID:1682
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1685
- /bin/grep
  grep -q systemd
  2⤵
  PID:1687
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1689
- /bin/ls
  ls -latrh /proc/mtd
  2⤵
  PID:1691
- /bin/grep
  grep exe
  2⤵
  PID:1692
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1694
- /bin/grep
  grep -q systemd
  2⤵
  PID:1696
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1698
- /bin/grep
  grep exe
  2⤵
  PID:1701
- /bin/ls
  ls -latrh /proc/net
  2⤵
  PID:1700
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1703
- /bin/grep
  grep -q systemd
  2⤵
  PID:1705
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1707
- /bin/grep
  grep exe
  2⤵
  PID:1710
- /bin/ls
  ls -latrh /proc/pagetypeinfo
  2⤵
  PID:1709
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1712
- /bin/grep
  grep -q systemd
  2⤵
  PID:1714
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1716
- /bin/ls
  ls -latrh /proc/partitions
  2⤵
  PID:1718
- /bin/grep
  grep exe
  2⤵
  PID:1719
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1721
- /bin/grep
  grep -q systemd
  2⤵
  PID:1723
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1725
- /bin/ls
  ls -latrh /proc/sched_debug
  2⤵
  PID:1727
- /bin/grep
  grep exe
  2⤵
  PID:1728
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1730
- /bin/grep
  grep -q systemd
  2⤵
  PID:1732
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1734
- /bin/grep
  grep exe
  2⤵
  PID:1737
- /bin/ls
  ls -latrh /proc/schedstat
  2⤵
  PID:1736
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1739
- /bin/grep
  grep -q systemd
  2⤵
  PID:1741
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1743
- /bin/grep
  grep exe
  2⤵
  PID:1746
- /bin/ls
  ls -latrh /proc/self
  2⤵
  PID:1745
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1748
- /bin/grep
  grep -q systemd
  2⤵
  PID:1750
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1752
- /bin/grep
  grep exe
  2⤵
  PID:1755
- /bin/ls
  ls -latrh /proc/slabinfo
  2⤵
  PID:1754
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1757
- /bin/grep
  grep -q systemd
  2⤵
  PID:1759
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1761
- /bin/ls
  ls -latrh /proc/softirqs
  2⤵
  PID:1763
- /bin/grep
  grep exe
  2⤵
  PID:1764
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1766
- /bin/grep
  grep -q systemd
  2⤵
  PID:1768
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1770
- /bin/grep
  grep exe
  2⤵
  PID:1773
- /bin/ls
  ls -latrh /proc/stat
  2⤵
  PID:1772
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1775
- /bin/grep
  grep -q systemd
  2⤵
  PID:1777
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1779
- /bin/ls
  ls -latrh /proc/swaps
  2⤵
  PID:1781
- /bin/grep
  grep exe
  2⤵
  PID:1782
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1784
- /bin/grep
  grep -q systemd
  2⤵
  PID:1786
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1788
- /bin/ls
  ls -latrh /proc/sys
  2⤵
  PID:1790
- /bin/grep
  grep exe
  2⤵
  PID:1791
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1793
- /bin/grep
  grep -q systemd
  2⤵
  PID:1795
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1797
- /bin/ls
  ls -latrh /proc/sysrq-trigger
  2⤵
  PID:1799
- /bin/grep
  grep exe
  2⤵
  PID:1800
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1802
- /bin/grep
  grep -q systemd
  2⤵
  PID:1804
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1806
- /bin/ls
  ls -latrh /proc/sysvipc
  2⤵
  - System Network Configuration Discovery
  PID:1808
- /bin/grep
  grep exe
  2⤵
  PID:1809
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1811
- /bin/grep
  grep -q systemd
  2⤵
  PID:1813
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1815
- /bin/ls
  ls -latrh /proc/thread-self
  2⤵
  PID:1817
- /bin/grep
  grep exe
  2⤵
  PID:1818
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1820
- /bin/grep
  grep -q systemd
  2⤵
  PID:1822
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1824
- /bin/ls
  ls -latrh /proc/timer_list
  2⤵
  PID:1826
- /bin/grep
  grep exe
  2⤵
  PID:1827
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1829
- /bin/grep
  grep -q systemd
  2⤵
  PID:1831
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1833
- /bin/grep
  grep exe
  2⤵
  PID:1836
- /bin/ls
  ls -latrh /proc/tty
  2⤵
  PID:1835
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1838
- /bin/grep
  grep -q systemd
  2⤵
  PID:1840
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1842
- /bin/ls
  ls -latrh /proc/uptime
  2⤵
  PID:1844
- /bin/grep
  grep exe
  2⤵
  PID:1845
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1847
- /bin/grep
  grep -q systemd
  2⤵
  PID:1849
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1851
- /bin/grep
  grep exe
  2⤵
  PID:1854
- /bin/ls
  ls -latrh /proc/version
  2⤵
  PID:1853
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1856
- /bin/grep
  grep -q systemd
  2⤵
  PID:1858
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1860
- /bin/grep
  grep exe
  2⤵
  PID:1863
- /bin/ls
  ls -latrh /proc/vmallocinfo
  2⤵
  PID:1862
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1865
- /bin/grep
  grep -q systemd
  2⤵
  PID:1867
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1869
- /bin/grep
  grep exe
  2⤵
  PID:1872
- /bin/ls
  ls -latrh /proc/vmstat
  2⤵
  PID:1871
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1874
- /bin/grep
  grep -q systemd
  2⤵
  PID:1876
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1878
- /bin/grep
  grep exe
  2⤵
  PID:1881
- /bin/ls
  ls -latrh /proc/zoneinfo
  2⤵
  PID:1880
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1883
- /bin/grep
  grep -q systemd
  2⤵
  PID:1885
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1887
- /usr/bin/id
  id -u
  2⤵
  - Reads runtime system information
  PID:1888
- /usr/bin/sudo
  sudo mkdir /etc/data
  2⤵
  - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
  PID:1889
- - /bin/mkdir
    mkdir /etc/data
    3⤵
    PID:1890
- /usr/bin/id
  id -u
  2⤵
  PID:1891
- /bin/uname
  uname -i
  2⤵
  - Attempts to change immutable files
  PID:1892
- /bin/uname
  uname -m
  2⤵
  PID:1893
- /bin/grep
  grep -e /dev
  2⤵
  PID:1896
- /bin/grep
  grep -v grep
  2⤵
  PID:1897
- /bin/ls
  ls -la /etc/data
  2⤵
  PID:1895
- /usr/bin/pkill
  pkill -f sshd
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1898
- /usr/bin/pkill
  pkill -f htop
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1900
- /usr/bin/pkill
  pkill -f linuxsys
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1901
- /usr/bin/pkill
  pkill -f kthreaddo
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1902
- /usr/bin/pkill
  pkill -f donkey
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1903
- /usr/bin/pkill
  pkill -f sysupdater
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1904
- /usr/bin/pkill
  pkill -f php-update.service
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1905
- /usr/bin/pkill
  pkill -f update-setup
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1906
- /bin/grep
  grep :1414
  2⤵
  PID:1908
- /bin/grep
  grep -v -
  2⤵
  PID:1911
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:1909
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  PID:1910
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Attempts to change immutable files
  PID:1912
- /bin/grep
  grep -v grep
  2⤵
  PID:1915
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:1916
- /bin/grep
  grep rtw88_pcied
  2⤵
  PID:1914
- /bin/ps
  ps ax
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1913
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Attempts to change immutable files
  PID:1917
- /bin/grep
  grep stratum
  2⤵
  PID:1919
- /bin/grep
  grep -v grep
  2⤵
  PID:1920
- /bin/ps
  ps ax
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1918
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:1921
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Attempts to change immutable files
  PID:1922
- /bin/grep
  grep Sofia
  2⤵
  PID:1924
- /bin/ps
  ps ax
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1923
- /bin/grep
  grep -v grep
  2⤵
  PID:1925
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Attempts to change immutable files
  PID:1927
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:1926
- /usr/bin/pkill
  pkill -f Sofia
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1928

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

T1548

Sudo and Sudo Caching

T1548.003

Defense Evasion

Abuse Elevation Control Mechanism

T1548

Sudo and Sudo Caching

T1548.003

Impair Defenses

T1562

Disable or Modify System Firewall

T1562.004

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads