Skip to content

Instantly share code, notes, and snippets.

timestamp processId parentProcessId userId processName hostName eventId eventName argsNum returnValue args sus evil
0 124.952820 383 1 101 systemd-resolve ip-10-100-1-186 41 socket 3 15 [{'name': 'domain', 'type': 'int', 'value': 'A... 0 0
1 124.953139 380 1 100 systemd-network ip-10-100-1-186 41 socket 3 15 [{'name': 'domain', 'type': 'int', 'value': 'A... 0 0
2 124.953424 1 0 0 systemd ip-10-100-1-186 1005 security_file_open 4 0 [{'name': 'pathname', 'type': 'const char*', '... 0 0
3 124.953464 1 0 0 systemd ip-10-100-1-186 257 openat 4 17 [{'name': 'dirfd', 'type': 'int', 'value': -10... 0 0
4
@danielin917
danielin917 / data_sample.txt
Created April 18, 2023 21:15
Dataset Sample
timestamp processId parentProcessId userId processName hostName eventId eventName argsNum returnValue args sus evil
0 124.952820 383 1 101 systemd-resolve ip-10-100-1-186 41 socket 3 15 [{'name': 'domain', 'type': 'int', 'value': 'A... 0 0
1 124.953139 380 1 100 systemd-network ip-10-100-1-186 41 socket 3 15 [{'name': 'domain', 'type': 'int', 'value': 'A... 0 0
2 124.953424 1 0 0 systemd ip-10-100-1-186 1005 security_file_open 4 0 [{'name': 'pathname', 'type': 'const char*', '... 0 0
3 124.953464 1 0 0 systemd ip-10-100-1-186 257 openat 4 17 [{'name': 'dirfd', 'type': 'int', 'value': -10... 0 0
4
@danielin917
danielin917 / CopyingData
Created April 18, 2023 21:14
Copy Data
cd data && cp ~/Downloads/archive.zip . && unzip archive.zip && cd -
cd data && cp ~/Downloads/archive.zip data && unzip archive.zip && cd -
timestamp processId parentProcessId userId processName hostName eventId eventName argsNum returnValue args sus evil
0 124.952820 383 1 101 systemd-resolve ip-10-100-1-186 41 socket 3 15 [{'name': 'domain', 'type': 'int', 'value': 'A... 0 0
1 124.953139 380 1 100 systemd-network ip-10-100-1-186 41 socket 3 15 [{'name': 'domain', 'type': 'int', 'value': 'A... 0 0
2 124.953424 1 0 0 systemd ip-10-100-1-186 1005 security_file_open 4 0 [{'name': 'pathname', 'type': 'const char*', '... 0 0
3 124.953464 1 0 0 systemd ip-10-100-1-186 257 openat 4 17 [{'name': 'dirfd', 'type': 'int', 'value': -10... 0 0
4