// Investigation
Hunt console
Structured search across the normalised event store. Terms combine with AND; prefix a value with ! to negate it.
hunt.queryREADY
to run
Result profile
240
events match · showing first 200
Severity
- Critical0
- High0
- Medium0
- Low0
- Info240
Applied filters
- parent = systemd
Matches
Newest first.
| Timestamp (UTC) | Severity | Event type | User | Source IP | Message |
|---|---|---|---|---|---|
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/nginx (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/sshd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/cron (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/node (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/systemd (uid=33 euid=33) | |
| Info | Process Execution | — | — | execve: /usr/bin/python3 (uid=33 euid=33) |