d10a2d0277129e5822360460b74a2d41685c61dc2260dc276117ae5df81810d6

Analysis

max time kernel
24s
platform
debian-9_armhf
resource
debian9-armhf-20260126-en
resource tags

arch:armhfimage:debian9-armhf-20260126-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
18/04/2026, 12:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
xx.sh
Size 16KB
Sample260418-pjghaaht9w
SHA256 d10a2d0277129e5822360460b74a2d41685c61dc2260dc276117ae5df81810d6
MD5 95f028cf87a1f06d45f345a644a69eb3
SHA1 123e5a1f34228a36032d8d365250991d763146ce
SHA512 66440c849ffc59f9e27dbf8dc316aa4c70a0402aee939c89b5cc9c539b69a79130a1c5b0b641dae9d4ffc7b576b5d96723c4f13137fcda2cdfb61c42d7f16bbc
SSDEEP 384:rfcMihlH2wx2vUaQa5/eN86704s80ooJQYgykWT4yCtvUsDjdWOoJw+O:zcg7YJDj8OoJw+O
TLSH
T10472218EB011ED74295DC4B59CE2287D602BA00A4D623F10B45C7E786B9DA05F7B9BFC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery privilege_escalation

Malware Config

Signatures

Flushes firewall rules 1 TTPs 1 IoCs

Flushes/ disables firewall rules inside the Linux kernel.

defense_evasion

Disable or Modify System Firewall

T1562.004

pid	Process
664	iptables

Abuse Elevation Control Mechanism: Sudo and Sudo Caching 1 TTPs 1 IoCs

Abuse sudo or cached sudo credentials to execute code.

privilege_escalation defense_evasion

Sudo and Sudo Caching

T1548.003

pid	Process
1878	sudo

Attempts to change immutable files 19 IoCs

Modifies inode attributes on the filesystem to allow changing of immutable files.

pid	Process
1947	xargs
1954	xargs
1966	xargs
647	chattr
654	chattr
1916	xargs
1927	xargs
1959	xargs
1972	xargs
1978	xargs
662	chattr
1881	uname
1906	xargs
1911	xargs
1932	xargs
1901	xargs
1922	xargs
1937	xargs
1942	xargs

Enumerates running processes
Discovers information about currently running processes on the system

Reads CPU attributes 1 TTPs 23 IoCs

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill

Process Discovery 1 TTPs 8 IoCs

Adversaries may try to discover information about running processes.

discovery

Process Discovery

T1057

pid	Process
1955	ps
1918	ps
1923	ps
1928	ps
1933	ps
1938	ps
1943	ps
1950	ps

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/133/stat	ps
File opened for reading	/proc/302/cmdline	ps
File opened for reading	/proc/18/stat	ps
File opened for reading	/proc/286/stat	ps
File opened for reading	/proc/219/status	ps
File opened for reading	/proc/43/stat	ps
File opened for reading	/proc/27/status	pkill
File opened for reading	/proc/103/stat	ps
File opened for reading	/proc/1777/stat	ps
File opened for reading	/proc/636/status	ps
File opened for reading	/proc/17/cmdline	ps
File opened for reading	/proc/41/stat	ps
File opened for reading	/proc/133/stat	ps
File opened for reading	/proc/136/status	pkill
File opened for reading	/proc/7/stat	ps
File opened for reading	/proc/sys/kernel/osrelease	ps
File opened for reading	/proc/cpu	ls
File opened for reading	/proc/41/status	ps
File opened for reading	/proc/8/status	ps
File opened for reading	/proc/14/cmdline	pkill
File opened for reading	/proc/638/status	ps
File opened for reading	/proc/14/cmdline	pkill
File opened for reading	/proc/11/cmdline	pkill
File opened for reading	/proc/2/status	ps
File opened for reading	/proc/43/status	pkill
File opened for reading	/proc/23/cmdline	ps
File opened for reading	/proc/26/status	ps
File opened for reading	/proc/1/stat	ps
File opened for reading	/proc/166/stat	ps
File opened for reading	/proc/19/cmdline	ps
File opened for reading	/proc/7/cmdline	pkill
File opened for reading	/proc/149/stat	ps
File opened for reading	/proc/20/cmdline	pkill
File opened for reading	/proc/6/status	ps
File opened for reading	/proc/41/stat	ps
File opened for reading	/proc/28/cmdline	ps
File opened for reading	/proc/306	ls
File opened for reading	/proc/577/status	ps
File opened for reading	/proc/6/cmdline	ps
File opened for reading	/proc/6/cmdline	ps
File opened for reading	/proc/28/cmdline	pkill
File opened for reading	/proc/16/status	pkill
File opened for reading	/proc/299/cmdline	pkill
File opened for reading	/proc/638/cmdline	pkill
File opened for reading	/proc/3/stat	ps
File opened for reading	/proc/299/status	ps
File opened for reading	/proc/581/status	ps
File opened for reading	/proc/7/stat	ps
File opened for reading	/proc/2/cmdline	pkill
File opened for reading	/proc/12/cmdline	pkill
File opened for reading	/proc/43/cmdline	pkill
File opened for reading	/proc/136/status	pkill
File opened for reading	/proc/16/cmdline	pkill
File opened for reading	/proc/5/cmdline	pkill
File opened for reading	/proc/19/cmdline	pkill
File opened for reading	/proc/286	ls
File opened for reading	/proc/105/cmdline	pkill
File opened for reading	/proc/15/stat	ps
File opened for reading	/proc/uptime	ps
File opened for reading	/proc/136/cmdline	ps
File opened for reading	/proc/136/cmdline	pkill
File opened for reading	/proc/5/stat	ps
File opened for reading	/proc/25/stat	ps
File opened for reading	/proc/636/status	pkill

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
1797	ls

/tmp/xx.sh
/tmp/xx.sh
1⤵
PID:640
- /usr/bin/chattr
  chattr -i /etc/ld.so.preload
  2⤵
  - Attempts to change immutable files
  PID:647
- /bin/rm
  rm -f /etc/ld.so.preload
  2⤵
  PID:651
- /usr/bin/chattr
  chattr -R -ia /var/spool/cron
  2⤵
  - Attempts to change immutable files
  PID:654
- /usr/bin/chattr
  chattr -ia /etc/crontab
  2⤵
  - Attempts to change immutable files
  PID:662
- /sbin/iptables
  iptables -F
  2⤵
  - Flushes firewall rules
  PID:664
- /bin/rm
  rm -rf /usr/bin/nginxd
  2⤵
  PID:669
- /bin/rm
  rm -rf /usr/bin/nginxd
  2⤵
  PID:671
- /bin/rm
  rm -rf /usr/bin/softirq
  2⤵
  PID:674
- /bin/grep
  grep exe
  2⤵
  PID:677
- /bin/ls
  ls -latrh /proc/1
  2⤵
  PID:676
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:680
- /bin/grep
  grep -q systemd
  2⤵
  PID:682
- /bin/grep
  grep -q deleted
  2⤵
  PID:684
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:686
- /bin/ls
  ls -latrh /proc/10
  2⤵
  PID:689
- /bin/grep
  grep exe
  2⤵
  PID:690
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:692
- /bin/grep
  grep -q systemd
  2⤵
  PID:694
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:696
- /bin/grep
  grep exe
  2⤵
  PID:699
- /bin/ls
  ls -latrh /proc/103
  2⤵
  PID:698
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:701
- /bin/grep
  grep -q systemd
  2⤵
  PID:703
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:705
- /bin/ls
  ls -latrh /proc/105
  2⤵
  PID:707
- /bin/grep
  grep exe
  2⤵
  PID:708
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:710
- /bin/grep
  grep -q systemd
  2⤵
  PID:712
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:714
- /bin/ls
  ls -latrh /proc/106
  2⤵
  PID:716
- /bin/grep
  grep exe
  2⤵
  PID:717
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:719
- /bin/grep
  grep -q systemd
  2⤵
  PID:721
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:723
- /bin/grep
  grep exe
  2⤵
  PID:726
- /bin/ls
  ls -latrh /proc/11
  2⤵
  PID:725
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:728
- /bin/grep
  grep -q systemd
  2⤵
  PID:730
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:732
- /bin/grep
  grep exe
  2⤵
  PID:735
- /bin/ls
  ls -latrh /proc/12
  2⤵
  PID:734
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:737
- /bin/grep
  grep -q systemd
  2⤵
  PID:739
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:741
- /bin/ls
  ls -latrh /proc/13
  2⤵
  PID:743
- /bin/grep
  grep exe
  2⤵
  PID:744
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:746
- /bin/grep
  grep -q systemd
  2⤵
  PID:748
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:750
- /bin/grep
  grep exe
  2⤵
  PID:753
- /bin/ls
  ls -latrh /proc/133
  2⤵
  PID:752
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:755
- /bin/grep
  grep -q systemd
  2⤵
  PID:757
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:759
- /bin/grep
  grep exe
  2⤵
  PID:762
- /bin/ls
  ls -latrh /proc/136
  2⤵
  PID:761
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:764
- /bin/grep
  grep -q systemd
  2⤵
  PID:766
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:768
- /bin/ls
  ls -latrh /proc/14
  2⤵
  PID:770
- /bin/grep
  grep exe
  2⤵
  PID:771
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:773
- /bin/grep
  grep -q systemd
  2⤵
  PID:775
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:777
- /bin/grep
  grep exe
  2⤵
  PID:780
- /bin/ls
  ls -latrh /proc/149
  2⤵
  PID:779
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:784
- /bin/grep
  grep -q systemd
  2⤵
  PID:787
- /bin/grep
  grep -q deleted
  2⤵
  PID:790
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:793
- /bin/ls
  ls -latrh /proc/15
  2⤵
  PID:796
- /bin/grep
  grep exe
  2⤵
  PID:797
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:801
- /bin/grep
  grep -q systemd
  2⤵
  PID:803
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:807
- /bin/grep
  grep exe
  2⤵
  PID:810
- /bin/ls
  ls -latrh /proc/156
  2⤵
  PID:809
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:814
- /bin/grep
  grep -q systemd
  2⤵
  PID:816
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:820
- /bin/ls
  ls -latrh /proc/16
  2⤵
  PID:822
- /bin/grep
  grep exe
  2⤵
  PID:823
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:827
- /bin/grep
  grep -q systemd
  2⤵
  PID:830
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:833
- /bin/ls
  ls -latrh /proc/166
  2⤵
  PID:836
- /bin/grep
  grep exe
  2⤵
  PID:837
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:840
- /bin/grep
  grep -q systemd
  2⤵
  PID:843
- /bin/grep
  grep -q deleted
  2⤵
  PID:846
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:849
- /bin/ls
  ls -latrh /proc/17
  2⤵
  PID:852
- /bin/grep
  grep exe
  2⤵
  PID:853
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:857
- /bin/grep
  grep -q systemd
  2⤵
  PID:859
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:863
- /bin/grep
  grep exe
  2⤵
  PID:867
- /bin/ls
  ls -latrh /proc/18
  2⤵
  PID:866
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:872
- /bin/grep
  grep -q systemd
  2⤵
  PID:875
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:878
- /bin/ls
  ls -latrh /proc/19
  2⤵
  PID:884
- /bin/grep
  grep exe
  2⤵
  PID:885
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:888
- /bin/grep
  grep -q systemd
  2⤵
  PID:891
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:894
- /bin/ls
  ls -latrh /proc/2
  2⤵
  PID:898
- /bin/grep
  grep exe
  2⤵
  PID:899
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:902
- /bin/grep
  grep -q systemd
  2⤵
  PID:904
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:906
- /bin/grep
  grep exe
  2⤵
  PID:909
- /bin/ls
  ls -latrh /proc/20
  2⤵
  PID:908
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:912
- /bin/grep
  grep -q systemd
  2⤵
  PID:914
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:916
- /bin/grep
  grep exe
  2⤵
  PID:919
- /bin/ls
  ls -latrh /proc/21
  2⤵
  PID:918
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:921
- /bin/grep
  grep -q systemd
  2⤵
  PID:923
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:925
- /bin/grep
  grep exe
  2⤵
  PID:928
- /bin/ls
  ls -latrh /proc/219
  2⤵
  PID:927
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:930
- /bin/grep
  grep -q systemd
  2⤵
  PID:932
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:934
- /bin/grep
  grep exe
  2⤵
  PID:937
- /bin/ls
  ls -latrh /proc/22
  2⤵
  PID:936
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:939
- /bin/grep
  grep -q systemd
  2⤵
  PID:941
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:943
- /bin/grep
  grep exe
  2⤵
  PID:946
- /bin/ls
  ls -latrh /proc/23
  2⤵
  PID:945
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:948
- /bin/grep
  grep -q systemd
  2⤵
  PID:950
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:952
- /bin/grep
  grep exe
  2⤵
  PID:955
- /bin/ls
  ls -latrh /proc/24
  2⤵
  PID:954
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:957
- /bin/grep
  grep -q systemd
  2⤵
  PID:959
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:961
- /bin/grep
  grep exe
  2⤵
  PID:964
- /bin/ls
  ls -latrh /proc/25
  2⤵
  PID:963
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:966
- /bin/grep
  grep -q systemd
  2⤵
  PID:968
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:970
- /bin/grep
  grep exe
  2⤵
  PID:973
- /bin/ls
  ls -latrh /proc/26
  2⤵
  PID:972
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:975
- /bin/grep
  grep -q systemd
  2⤵
  PID:977
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:979
- /bin/grep
  grep exe
  2⤵
  PID:982
- /bin/ls
  ls -latrh /proc/27
  2⤵
  PID:981
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:984
- /bin/grep
  grep -q systemd
  2⤵
  PID:986
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:988
- /bin/ls
  ls -latrh /proc/28
  2⤵
  PID:990
- /bin/grep
  grep exe
  2⤵
  PID:991
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:993
- /bin/grep
  grep -q systemd
  2⤵
  PID:995
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:999
- /bin/grep
  grep exe
  2⤵
  PID:1003
- /bin/ls
  ls -latrh /proc/286
  2⤵
  - Reads runtime system information
  PID:1002
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1006
- /bin/grep
  grep -q systemd
  2⤵
  PID:1009
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1012
- /bin/grep
  grep exe
  2⤵
  PID:1016
- /bin/ls
  ls -latrh /proc/29
  2⤵
  PID:1015
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1020
- /bin/grep
  grep -q systemd
  2⤵
  PID:1023
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1026
- /bin/grep
  grep exe
  2⤵
  PID:1030
- /bin/ls
  ls -latrh /proc/292
  2⤵
  PID:1029
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1033
- /bin/grep
  grep -q systemd
  2⤵
  PID:1036
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1039
- /bin/grep
  grep exe
  2⤵
  PID:1043
- /bin/ls
  ls -latrh /proc/299
  2⤵
  PID:1042
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1047
- /bin/grep
  grep -q systemd
  2⤵
  PID:1049
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1053
- /bin/ls
  ls -latrh /proc/3
  2⤵
  PID:1055
- /bin/grep
  grep exe
  2⤵
  PID:1056
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1060
- /bin/grep
  grep -q systemd
  2⤵
  PID:1063
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1066
- /bin/ls
  ls -latrh /proc/302
  2⤵
  PID:1069
- /bin/grep
  grep exe
  2⤵
  PID:1070
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1073
- /bin/grep
  grep -q systemd
  2⤵
  PID:1077
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1080
- /bin/grep
  grep exe
  2⤵
  PID:1086
- /bin/ls
  ls -latrh /proc/303
  2⤵
  PID:1083
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1088
- /bin/grep
  grep -q systemd
  2⤵
  PID:1090
- /bin/grep
  grep -q deleted
  2⤵
  PID:1092
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1094
- /bin/grep
  grep exe
  2⤵
  PID:1097
- /bin/ls
  ls -latrh /proc/304
  2⤵
  PID:1096
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1099
- /bin/grep
  grep -q systemd
  2⤵
  PID:1101
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1103
- /bin/grep
  grep exe
  2⤵
  PID:1106
- /bin/ls
  ls -latrh /proc/306
  2⤵
  - Reads runtime system information
  PID:1105
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1108
- /bin/grep
  grep -q systemd
  2⤵
  PID:1110
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1112
- /bin/grep
  grep exe
  2⤵
  PID:1115
- /bin/ls
  ls -latrh /proc/318
  2⤵
  PID:1114
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1117
- /bin/grep
  grep -q systemd
  2⤵
  PID:1119
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1121
- /bin/grep
  grep exe
  2⤵
  PID:1124
- /bin/ls
  ls -latrh /proc/323
  2⤵
  PID:1123
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1126
- /bin/grep
  grep -q systemd
  2⤵
  PID:1128
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1130
- /bin/grep
  grep exe
  2⤵
  PID:1133
- /bin/ls
  ls -latrh /proc/4
  2⤵
  PID:1132
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1135
- /bin/grep
  grep -q systemd
  2⤵
  PID:1137
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1139
- /bin/grep
  grep exe
  2⤵
  PID:1142
- /bin/ls
  ls -latrh /proc/41
  2⤵
  PID:1141
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1144
- /bin/grep
  grep -q systemd
  2⤵
  PID:1146
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1148
- /bin/ls
  ls -latrh /proc/42
  2⤵
  PID:1150
- /bin/grep
  grep exe
  2⤵
  PID:1151
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1153
- /bin/grep
  grep -q systemd
  2⤵
  PID:1155
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1157
- /bin/grep
  grep exe
  2⤵
  PID:1160
- /bin/ls
  ls -latrh /proc/43
  2⤵
  PID:1159
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1162
- /bin/grep
  grep -q systemd
  2⤵
  PID:1164
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1166
- /bin/grep
  grep exe
  2⤵
  PID:1169
- /bin/ls
  ls -latrh /proc/5
  2⤵
  PID:1168
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1171
- /bin/grep
  grep -q systemd
  2⤵
  PID:1173
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1175
- /bin/grep
  grep exe
  2⤵
  PID:1178
- /bin/ls
  ls -latrh /proc/562
  2⤵
  PID:1177
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1180
- /bin/grep
  grep -q systemd
  2⤵
  PID:1182
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1184
- /bin/grep
  grep exe
  2⤵
  PID:1187
- /bin/ls
  ls -latrh /proc/574
  2⤵
  PID:1186
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1189
- /bin/grep
  grep -q systemd
  2⤵
  PID:1191
- /bin/grep
  grep -q deleted
  2⤵
  PID:1193
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1195
- /bin/ls
  ls -latrh /proc/577
  2⤵
  PID:1197
- /bin/grep
  grep exe
  2⤵
  PID:1198
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1200
- /bin/grep
  grep -q systemd
  2⤵
  PID:1202
- /bin/grep
  grep -q deleted
  2⤵
  PID:1204
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1206
- /bin/grep
  grep exe
  2⤵
  PID:1209
- /bin/ls
  ls -latrh /proc/581
  2⤵
  PID:1208
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1211
- /bin/grep
  grep -q systemd
  2⤵
  PID:1213
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1215
- /bin/grep
  grep exe
  2⤵
  PID:1218
- /bin/ls
  ls -latrh /proc/582
  2⤵
  PID:1217
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1220
- /bin/grep
  grep -q systemd
  2⤵
  PID:1222
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1224
- /bin/grep
  grep exe
  2⤵
  PID:1227
- /bin/ls
  ls -latrh /proc/6
  2⤵
  PID:1226
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1229
- /bin/grep
  grep -q systemd
  2⤵
  PID:1231
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1233
- /bin/ls
  ls -latrh /proc/624
  2⤵
  PID:1235
- /bin/grep
  grep exe
  2⤵
  PID:1236
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1238
- /bin/grep
  grep -q systemd
  2⤵
  PID:1240
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1242
- /bin/grep
  grep exe
  2⤵
  PID:1245
- /bin/ls
  ls -latrh /proc/630
  2⤵
  PID:1244
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1247
- /bin/grep
  grep -q systemd
  2⤵
  PID:1249
- /bin/grep
  grep -q deleted
  2⤵
  PID:1251
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1253
- /bin/ls
  ls -latrh /proc/631
  2⤵
  PID:1255
- /bin/grep
  grep exe
  2⤵
  PID:1256
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1258
- /bin/grep
  grep -q systemd
  2⤵
  PID:1260
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1262
- /bin/ls
  ls -latrh /proc/636
  2⤵
  PID:1264
- /bin/grep
  grep exe
  2⤵
  PID:1265
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1267
- /bin/grep
  grep -q systemd
  2⤵
  PID:1269
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1271
- /bin/grep
  grep exe
  2⤵
  PID:1274
- /bin/ls
  ls -latrh /proc/637
  2⤵
  PID:1273
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1276
- /bin/grep
  grep -q systemd
  2⤵
  PID:1278
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1280
- /bin/ls
  ls -latrh /proc/638
  2⤵
  PID:1282
- /bin/grep
  grep exe
  2⤵
  PID:1283
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1285
- /bin/grep
  grep -q systemd
  2⤵
  PID:1287
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1289
- /bin/ls
  ls -latrh /proc/640
  2⤵
  PID:1291
- /bin/grep
  grep exe
  2⤵
  PID:1292
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1294
- /bin/grep
  grep -q systemd
  2⤵
  PID:1296
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1298
- /bin/ls
  ls -latrh /proc/642
  2⤵
  PID:1300
- /bin/grep
  grep exe
  2⤵
  PID:1301
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1303
- /bin/grep
  grep -q systemd
  2⤵
  PID:1305
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1307
- /bin/ls
  ls -latrh /proc/655
  2⤵
  PID:1309
- /bin/grep
  grep exe
  2⤵
  PID:1310
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1312
- /bin/grep
  grep -q systemd
  2⤵
  PID:1314
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1316
- /bin/ls
  ls -latrh /proc/673
  2⤵
  PID:1318
- /bin/grep
  grep exe
  2⤵
  PID:1319
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1321
- /bin/grep
  grep -q systemd
  2⤵
  PID:1323
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1325
- /bin/ls
  ls -latrh /proc/7
  2⤵
  PID:1327
- /bin/grep
  grep exe
  2⤵
  PID:1328
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1330
- /bin/grep
  grep -q systemd
  2⤵
  PID:1332
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1334
- /bin/grep
  grep exe
  2⤵
  PID:1337
- /bin/ls
  ls -latrh /proc/73
  2⤵
  PID:1336
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1339
- /bin/grep
  grep -q systemd
  2⤵
  PID:1341
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1343
- /bin/grep
  grep exe
  2⤵
  PID:1346
- /bin/ls
  ls -latrh /proc/8
  2⤵
  PID:1345
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1348
- /bin/grep
  grep -q systemd
  2⤵
  PID:1350
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1352
- /bin/ls
  ls -latrh /proc/9
  2⤵
  PID:1354
- /bin/grep
  grep exe
  2⤵
  PID:1355
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1357
- /bin/grep
  grep -q systemd
  2⤵
  PID:1359
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1361
- /bin/ls
  ls -latrh /proc/94
  2⤵
  PID:1363
- /bin/grep
  grep exe
  2⤵
  PID:1364
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1366
- /bin/grep
  grep -q systemd
  2⤵
  PID:1368
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1370
- /bin/grep
  grep exe
  2⤵
  PID:1373
- /bin/ls
  ls -latrh /proc/apm
  2⤵
  PID:1372
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1375
- /bin/grep
  grep -q systemd
  2⤵
  PID:1377
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1379
- /bin/ls
  ls -latrh /proc/buddyinfo
  2⤵
  PID:1381
- /bin/grep
  grep exe
  2⤵
  PID:1382
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1384
- /bin/grep
  grep -q systemd
  2⤵
  PID:1386
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1388
- /bin/grep
  grep exe
  2⤵
  PID:1391
- /bin/ls
  ls -latrh /proc/bus
  2⤵
  PID:1390
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1393
- /bin/grep
  grep -q systemd
  2⤵
  PID:1395
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1397
- /bin/grep
  grep exe
  2⤵
  PID:1400
- /bin/ls
  ls -latrh /proc/cgroups
  2⤵
  PID:1399
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1402
- /bin/grep
  grep -q systemd
  2⤵
  PID:1404
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1406
- /bin/grep
  grep exe
  2⤵
  PID:1409
- /bin/ls
  ls -latrh /proc/cmdline
  2⤵
  PID:1408
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1411
- /bin/grep
  grep -q systemd
  2⤵
  PID:1413
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1415
- /bin/ls
  ls -latrh /proc/consoles
  2⤵
  PID:1417
- /bin/grep
  grep exe
  2⤵
  PID:1418
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1420
- /bin/grep
  grep -q systemd
  2⤵
  PID:1422
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1424
- /bin/grep
  grep exe
  2⤵
  PID:1427
- /bin/ls
  ls -latrh /proc/cpu
  2⤵
  - Reads runtime system information
  PID:1426
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1429
- /bin/grep
  grep -q systemd
  2⤵
  PID:1431
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1433
- /bin/grep
  grep exe
  2⤵
  PID:1436
- /bin/ls
  ls -latrh /proc/cpuinfo
  2⤵
  PID:1435
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1438
- /bin/grep
  grep -q systemd
  2⤵
  PID:1440
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1442
- /bin/ls
  ls -latrh /proc/crypto
  2⤵
  PID:1444
- /bin/grep
  grep exe
  2⤵
  PID:1445
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1447
- /bin/grep
  grep -q systemd
  2⤵
  PID:1449
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1451
- /bin/grep
  grep exe
  2⤵
  PID:1454
- /bin/ls
  ls -latrh /proc/devices
  2⤵
  PID:1453
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1456
- /bin/grep
  grep -q systemd
  2⤵
  PID:1458
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1460
- /bin/ls
  ls -latrh /proc/device-tree
  2⤵
  PID:1462
- /bin/grep
  grep exe
  2⤵
  PID:1463
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1465
- /bin/grep
  grep -q systemd
  2⤵
  PID:1467
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1469
- /bin/grep
  grep exe
  2⤵
  PID:1472
- /bin/ls
  ls -latrh /proc/diskstats
  2⤵
  PID:1471
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1474
- /bin/grep
  grep -q systemd
  2⤵
  PID:1476
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1478
- /bin/grep
  grep exe
  2⤵
  PID:1481
- /bin/ls
  ls -latrh /proc/driver
  2⤵
  PID:1480
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1483
- /bin/grep
  grep -q systemd
  2⤵
  PID:1485
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1487
- /bin/ls
  ls -latrh /proc/execdomains
  2⤵
  PID:1489
- /bin/grep
  grep exe
  2⤵
  PID:1490
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1492
- /bin/grep
  grep -q systemd
  2⤵
  PID:1494
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1496
- /bin/grep
  grep exe
  2⤵
  PID:1499
- /bin/ls
  ls -latrh /proc/fb
  2⤵
  PID:1498
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1501
- /bin/grep
  grep -q systemd
  2⤵
  PID:1503
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1505
- /bin/ls
  ls -latrh /proc/filesystems
  2⤵
  PID:1507
- /bin/grep
  grep exe
  2⤵
  PID:1508
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1510
- /bin/grep
  grep -q systemd
  2⤵
  PID:1512
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1514
- /bin/grep
  grep exe
  2⤵
  PID:1517
- /bin/ls
  ls -latrh /proc/fs
  2⤵
  PID:1516
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1519
- /bin/grep
  grep -q systemd
  2⤵
  PID:1521
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1523
- /bin/ls
  ls -latrh /proc/interrupts
  2⤵
  PID:1525
- /bin/grep
  grep exe
  2⤵
  PID:1526
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1528
- /bin/grep
  grep -q systemd
  2⤵
  PID:1530
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1532
- /bin/ls
  ls -latrh /proc/iomem
  2⤵
  PID:1534
- /bin/grep
  grep exe
  2⤵
  PID:1535
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1537
- /bin/grep
  grep -q systemd
  2⤵
  PID:1539
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1541
- /bin/ls
  ls -latrh /proc/ioports
  2⤵
  PID:1543
- /bin/grep
  grep exe
  2⤵
  PID:1544
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1546
- /bin/grep
  grep -q systemd
  2⤵
  PID:1548
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1550
- /bin/grep
  grep exe
  2⤵
  PID:1553
- /bin/ls
  ls -latrh /proc/irq
  2⤵
  PID:1552
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1555
- /bin/grep
  grep -q systemd
  2⤵
  PID:1557
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1559
- /bin/grep
  grep exe
  2⤵
  PID:1562
- /bin/ls
  ls -latrh /proc/kallsyms
  2⤵
  PID:1561
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1564
- /bin/grep
  grep -q systemd
  2⤵
  PID:1566
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1568
- /bin/grep
  grep exe
  2⤵
  PID:1571
- /bin/ls
  ls -latrh /proc/keys
  2⤵
  PID:1570
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1573
- /bin/grep
  grep -q systemd
  2⤵
  PID:1575
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1577
- /bin/ls
  ls -latrh /proc/key-users
  2⤵
  PID:1579
- /bin/grep
  grep exe
  2⤵
  PID:1580
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1582
- /bin/grep
  grep -q systemd
  2⤵
  PID:1584
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1586
- /bin/ls
  ls -latrh /proc/kmsg
  2⤵
  PID:1588
- /bin/grep
  grep exe
  2⤵
  PID:1589
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1591
- /bin/grep
  grep -q systemd
  2⤵
  PID:1593
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1595
- /bin/grep
  grep exe
  2⤵
  PID:1598
- /bin/ls
  ls -latrh /proc/kpagecgroup
  2⤵
  PID:1597
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1600
- /bin/grep
  grep -q systemd
  2⤵
  PID:1602
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1604
- /bin/grep
  grep exe
  2⤵
  PID:1607
- /bin/ls
  ls -latrh /proc/kpagecount
  2⤵
  PID:1606
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1609
- /bin/grep
  grep -q systemd
  2⤵
  PID:1611
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1613
- /bin/grep
  grep exe
  2⤵
  PID:1616
- /bin/ls
  ls -latrh /proc/kpageflags
  2⤵
  PID:1615
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1618
- /bin/grep
  grep -q systemd
  2⤵
  PID:1620
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1622
- /bin/ls
  ls -latrh /proc/loadavg
  2⤵
  PID:1624
- /bin/grep
  grep exe
  2⤵
  PID:1625
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1627
- /bin/grep
  grep -q systemd
  2⤵
  PID:1629
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1631
- /bin/ls
  ls -latrh /proc/locks
  2⤵
  PID:1633
- /bin/grep
  grep exe
  2⤵
  PID:1634
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1636
- /bin/grep
  grep -q systemd
  2⤵
  PID:1638
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1640
- /bin/ls
  ls -latrh /proc/meminfo
  2⤵
  PID:1642
- /bin/grep
  grep exe
  2⤵
  PID:1643
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1645
- /bin/grep
  grep -q systemd
  2⤵
  PID:1647
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1649
- /bin/grep
  grep exe
  2⤵
  PID:1652
- /bin/ls
  ls -latrh /proc/misc
  2⤵
  PID:1651
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1654
- /bin/grep
  grep -q systemd
  2⤵
  PID:1656
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1658
- /bin/grep
  grep exe
  2⤵
  PID:1661
- /bin/ls
  ls -latrh /proc/modules
  2⤵
  PID:1660
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1663
- /bin/grep
  grep -q systemd
  2⤵
  PID:1665
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1667
- /bin/grep
  grep exe
  2⤵
  PID:1670
- /bin/ls
  ls -latrh /proc/mounts
  2⤵
  PID:1669
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1672
- /bin/grep
  grep -q systemd
  2⤵
  PID:1674
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1676
- /bin/ls
  ls -latrh /proc/mtd
  2⤵
  PID:1678
- /bin/grep
  grep exe
  2⤵
  PID:1679
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1681
- /bin/grep
  grep -q systemd
  2⤵
  PID:1683
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1685
- /bin/grep
  grep exe
  2⤵
  PID:1688
- /bin/ls
  ls -latrh /proc/net
  2⤵
  PID:1687
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1690
- /bin/grep
  grep -q systemd
  2⤵
  PID:1692
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1694
- /bin/grep
  grep exe
  2⤵
  PID:1697
- /bin/ls
  ls -latrh /proc/pagetypeinfo
  2⤵
  PID:1696
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1699
- /bin/grep
  grep -q systemd
  2⤵
  PID:1701
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1703
- /bin/ls
  ls -latrh /proc/partitions
  2⤵
  PID:1705
- /bin/grep
  grep exe
  2⤵
  PID:1706
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1708
- /bin/grep
  grep -q systemd
  2⤵
  PID:1710
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1712
- /bin/ls
  ls -latrh /proc/sched_debug
  2⤵
  PID:1714
- /bin/grep
  grep exe
  2⤵
  PID:1715
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1717
- /bin/grep
  grep -q systemd
  2⤵
  PID:1719
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1721
- /bin/grep
  grep exe
  2⤵
  PID:1724
- /bin/ls
  ls -latrh /proc/schedstat
  2⤵
  PID:1723
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1726
- /bin/grep
  grep -q systemd
  2⤵
  PID:1728
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1730
- /bin/grep
  grep exe
  2⤵
  PID:1733
- /bin/ls
  ls -latrh /proc/self
  2⤵
  PID:1732
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1735
- /bin/grep
  grep -q systemd
  2⤵
  PID:1737
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1739
- /bin/grep
  grep exe
  2⤵
  PID:1742
- /bin/ls
  ls -latrh /proc/slabinfo
  2⤵
  PID:1741
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1744
- /bin/grep
  grep -q systemd
  2⤵
  PID:1746
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1748
- /bin/ls
  ls -latrh /proc/softirqs
  2⤵
  PID:1750
- /bin/grep
  grep exe
  2⤵
  PID:1751
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1753
- /bin/grep
  grep -q systemd
  2⤵
  PID:1755
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1757
- /bin/grep
  grep exe
  2⤵
  PID:1761
- /bin/ls
  ls -latrh /proc/stat
  2⤵
  PID:1760
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1763
- /bin/grep
  grep -q systemd
  2⤵
  PID:1765
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1767
- /bin/grep
  grep exe
  2⤵
  PID:1770
- /bin/ls
  ls -latrh /proc/swaps
  2⤵
  PID:1769
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1772
- /bin/grep
  grep -q systemd
  2⤵
  PID:1774
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1776
- /bin/ls
  ls -latrh /proc/sys
  2⤵
  PID:1779
- /bin/grep
  grep exe
  2⤵
  PID:1780
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1782
- /bin/grep
  grep -q systemd
  2⤵
  PID:1784
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1786
- /bin/ls
  ls -latrh /proc/sysrq-trigger
  2⤵
  PID:1788
- /bin/grep
  grep exe
  2⤵
  PID:1789
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1791
- /bin/grep
  grep -q systemd
  2⤵
  PID:1793
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1795
- /bin/ls
  ls -latrh /proc/sysvipc
  2⤵
  - System Network Configuration Discovery
  PID:1797
- /bin/grep
  grep exe
  2⤵
  PID:1798
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1800
- /bin/grep
  grep -q systemd
  2⤵
  PID:1802
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1804
- /bin/grep
  grep exe
  2⤵
  PID:1807
- /bin/ls
  ls -latrh /proc/thread-self
  2⤵
  PID:1806
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1809
- /bin/grep
  grep -q systemd
  2⤵
  PID:1811
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1813
- /bin/grep
  grep exe
  2⤵
  PID:1816
- /bin/ls
  ls -latrh /proc/timer_list
  2⤵
  PID:1815
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1818
- /bin/grep
  grep -q systemd
  2⤵
  PID:1820
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1822
- /bin/grep
  grep exe
  2⤵
  PID:1825
- /bin/ls
  ls -latrh /proc/tty
  2⤵
  PID:1824
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1827
- /bin/grep
  grep -q systemd
  2⤵
  PID:1829
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1831
- /bin/grep
  grep exe
  2⤵
  PID:1834
- /bin/ls
  ls -latrh /proc/uptime
  2⤵
  PID:1833
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1836
- /bin/grep
  grep -q systemd
  2⤵
  PID:1838
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1840
- /bin/grep
  grep exe
  2⤵
  PID:1843
- /bin/ls
  ls -latrh /proc/version
  2⤵
  PID:1842
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1845
- /bin/grep
  grep -q systemd
  2⤵
  PID:1847
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1849
- /bin/ls
  ls -latrh /proc/vmallocinfo
  2⤵
  PID:1851
- /bin/grep
  grep exe
  2⤵
  PID:1852
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1854
- /bin/grep
  grep -q systemd
  2⤵
  PID:1856
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1858
- /bin/grep
  grep exe
  2⤵
  PID:1861
- /bin/ls
  ls -latrh /proc/vmstat
  2⤵
  PID:1860
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1863
- /bin/grep
  grep -q systemd
  2⤵
  PID:1865
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1867
- /bin/ls
  ls -latrh /proc/zoneinfo
  2⤵
  PID:1869
- /bin/grep
  grep exe
  2⤵
  PID:1870
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1872
- /bin/grep
  grep -q systemd
  2⤵
  PID:1874
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1876
- /usr/bin/id
  id -u
  2⤵
  PID:1877
- /usr/bin/sudo
  sudo mkdir /etc/data
  2⤵
  - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
  PID:1878
- - /bin/mkdir
    mkdir /etc/data
    3⤵
    PID:1879
- /usr/bin/id
  id -u
  2⤵
  PID:1880
- /bin/uname
  uname -i
  2⤵
  - Attempts to change immutable files
  PID:1881
- /bin/uname
  uname -m
  2⤵
  PID:1882
- /bin/grep
  grep -e /dev
  2⤵
  PID:1885
- /bin/grep
  grep -v grep
  2⤵
  PID:1886
- /bin/ls
  ls -la /etc/data
  2⤵
  PID:1884
- /usr/bin/pkill
  pkill -f sshd
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1887
- /usr/bin/pkill
  pkill -f htop
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1889
- /usr/bin/pkill
  pkill -f linuxsys
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1890
- /usr/bin/pkill
  pkill -f kthreaddo
  2⤵
  - Reads CPU attributes
  PID:1891
- /usr/bin/pkill
  pkill -f donkey
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1892
- /usr/bin/pkill
  pkill -f sysupdater
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1893
- /usr/bin/pkill
  pkill -f php-update.service
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1894
- /usr/bin/pkill
  pkill -f update-setup
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1895
- /bin/grep
  grep :1414
  2⤵
  PID:1897
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:1898
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  PID:1899
- /bin/grep
  grep -v -
  2⤵
  PID:1900
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Attempts to change immutable files
  PID:1901
- /bin/grep
  grep -v grep
  2⤵
  PID:1904
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:1905
- /bin/grep
  grep rtw88_pcied
  2⤵
  PID:1903
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Attempts to change immutable files
  PID:1906
- /bin/ps
  ps ax
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1902
- /bin/grep
  grep stratum
  2⤵
  PID:1908
- /bin/ps
  ps ax
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1907
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:1910
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Attempts to change immutable files
  PID:1911
- /bin/grep
  grep -v grep
  2⤵
  PID:1909
- /bin/grep
  grep Sofia
  2⤵
  PID:1913
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:1915
- /bin/ps
  ps ax
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1912
- /bin/grep
  grep -v grep
  2⤵
  PID:1914
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Attempts to change immutable files
  PID:1916
- /usr/bin/pkill
  pkill -f Sofia
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1917
- /bin/grep
  grep tracepath
  2⤵
  PID:1919
- /bin/ps
  ps aux
  2⤵
  - Reads CPU attributes
  - Process Discovery
  - Reads runtime system information
  PID:1918
- /bin/grep
  grep -v grep
  2⤵
  PID:1920
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Attempts to change immutable files
  PID:1922
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:1921
- /bin/grep
  grep /dot
  2⤵
  PID:1924
- /bin/grep
  grep -v grep
  2⤵
  PID:1925
- /bin/ps
  ps aux
  2⤵
  - Reads CPU attributes
  - Process Discovery
  - Reads runtime system information
  PID:1923
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:1926
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Attempts to change immutable files
  PID:1927
- /bin/grep
  grep "php-fpm pool www"
  2⤵
  PID:1929
- /bin/grep
  grep -v grep
  2⤵
  PID:1930
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Attempts to change immutable files
  PID:1932
- /bin/ps
  ps aux
  2⤵
  - Reads CPU attributes
  - Process Discovery
  - Reads runtime system information
  PID:1928
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:1931
- /bin/grep
  grep "Cli start accept"
  2⤵
  PID:1934
- /bin/grep
  grep -v grep
  2⤵
  PID:1935
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Attempts to change immutable files
  PID:1937
- /bin/ps
  ps aux
  2⤵
  - Reads CPU attributes
  - Process Discovery
  - Reads runtime system information
  PID:1933
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:1936
- /bin/grep
  grep "bash -k"
  2⤵
  PID:1939
- /bin/grep
  grep -v grep
  2⤵
  PID:1940
- /bin/ps
  ps aux
  2⤵
  - Reads CPU attributes
  - Process Discovery
  - Reads runtime system information
  PID:1938
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Attempts to change immutable files
  PID:1942
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:1941
- /bin/grep
  grep perfctl
  2⤵
  PID:1944
- /bin/grep
  grep -v grep
  2⤵
  PID:1945
- /bin/ps
  ps aux
  2⤵
  - Reads CPU attributes
  - Process Discovery
  - Reads runtime system information
  PID:1943
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:1946
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Attempts to change immutable files
  PID:1947
- /usr/bin/pkill
  pkill -f hezb
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1948
- /usr/bin/pkill
  pkill -f /tmp/.out
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1949
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:1953
- /bin/grep
  grep ./ll1
  2⤵
  PID:1951
- /bin/grep
  grep -v grep
  2⤵
  PID:1952
- /bin/ps
  ps aux
  2⤵
  - Reads CPU attributes
  - Process Discovery
  - Reads runtime system information
  PID:1950
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Attempts to change immutable files
  PID:1954
- /usr/bin/awk
  awk "{if(\$3>80.0) print \$2}"
  2⤵
  PID:1958
- /bin/grep
  grep agetty
  2⤵
  PID:1956
- /bin/ps
  ps aux
  2⤵
  - Reads CPU attributes
  - Process Discovery
  - Reads runtime system information
  PID:1955
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Attempts to change immutable files
  PID:1959
- /bin/grep
  grep -v grep
  2⤵
  PID:1957
- /usr/bin/pkill
  pkill -f 42.112.28.216
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1960
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:1963
- /bin/grep
  grep 207.38.87.6
  2⤵
  PID:1962
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Attempts to change immutable files
  PID:1966
- /bin/grep
  grep -v -
  2⤵
  PID:1965
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  PID:1964
- /bin/grep
  grep 23.94.214.119
  2⤵
  PID:1968
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:1969
- /bin/grep
  grep -v -
  2⤵
  PID:1971
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  PID:1970
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Attempts to change immutable files
  PID:1972
- /bin/grep
  grep 127.0.0.1:52018
  2⤵
  PID:1974
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:1975
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Attempts to change immutable files
  PID:1978
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  PID:1976
- /bin/grep
  grep -v -
  2⤵
  PID:1977
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:1981
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  PID:1982

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

T1548

Sudo and Sudo Caching

T1548.003

Defense Evasion

Abuse Elevation Control Mechanism

T1548

Sudo and Sudo Caching

T1548.003

Impair Defenses

T1562

Disable or Modify System Firewall

T1562.004

Credential Access

Discovery

Process Discovery

T1057

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads