type=SYSCALL msg=audit(04/16/2025 10:15:35.891:100246) : arch=x86_64 syscall=execve success=yes exit=0 a0=0x608f4f823420 a1=0x608f4f8234e0 a2=0x608f4f8175d0 a3=0x8 items=2 ppid=41294 pid=41405 auid=ubuntu uid=root gid=root euid=root suid=root fsuid=root egid=crontab sgid=crontab fsgid=crontab tty=pts3 ses=7 comm=crontab exe=/usr/bin/crontab subj=unconfined key=rootcmd 
type=SYSCALL msg=audit(04/16/2025 10:15:30.094:100236) : arch=x86_64 syscall=execve success=yes exit=0 a0=0x608f4f8234c0 a1=0x608f4f817ee0 a2=0x608f4f8175d0 a3=0x8 items=2 ppid=41294 pid=41400 auid=ubuntu uid=root gid=root euid=root suid=root fsuid=root egid=crontab sgid=crontab fsgid=crontab tty=pts3 ses=7 comm=crontab exe=/usr/bin/crontab subj=unconfined key=rootcmd 
type=SYSCALL msg=audit(04/16/2025 10:14:07.928:100128) : arch=x86_64 syscall=execve success=yes exit=0 a0=0x608f4f81fe20 a1=0x608f4f81d370 a2=0x608f4f8175d0 a3=0x8 items=2 ppid=41294 pid=41300 auid=ubuntu uid=root gid=root euid=root suid=root fsuid=root egid=crontab sgid=crontab fsgid=crontab tty=pts3 ses=7 comm=crontab exe=/usr/bin/crontab subj=unconfined key=rootcmd