{"name":"es_process_events","hostIdentifier":"MacBookPro","calendarTime":"Thu Feb 19 13:50:58 2026 UTC","unixTime":1771509058,"epoch":0,"counter":700,"numerics":false,"columns":{"cdhash":"81dc01aa177c30e140e17d5c29dd22e0e7407427","child_pid":"","cmdline":"","cmdline_count":"0","codesigning_flags":"","cwd":"","egid":"0","env":"","env_count":"0","euid":"0","event_type":"exit","exit_code":"0","gid":"0","global_seq_num":"4975","original_parent":"40024","parent":"40024","parent_pidversion":"105354","path":"/usr/bin/smbutil","pid":"44241","pidversion":"116042","platform_binary":"1","responsible_pid":"29792","responsible_pidversion":"83076","seq_num":"1411","session_id":"38273","signing_id":"com.apple.smbutil","team_id":"","time":"1771509052","uid":"0","username":"root","version":"8"},"action":"added"}
{"name":"es_process_events","hostIdentifier":"MacBookPro","calendarTime":"Thu Feb 19 13:50:58 2026 UTC","unixTime":1771509058,"epoch":0,"counter":700,"numerics":false,"columns":{"cdhash":"81dc01aa177c30e140e17d5c29dd22e0e7407427","child_pid":"","cmdline":"smbutil lookup -w 192.168.86.158 * ","cmdline_count":"5","codesigning_flags":"","cwd":"/Users/snap/Downloads","egid":"0","env":"SHELL=/bin/sh TERM=xterm-256color USER=root SUDO_USER=snap SUDO_UID=501 SSH_AUTH_SOCK=/private/tmp/com.apple.launchd.614sLX07yb/Listeners __CF_USER_TEXT_ENCODING=0x0:0:0 MAIL=/var/mail/root PATH=/Users/snap/.local/bin:/usr/local/bin:/System/Cryptexes/App/usr/bin:/usr/bin:/bin:/usr/sbin:/sbin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/local/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/appleinternal/bin:/opt/homebrew/bin:/Applications/iTerm.app/Contents/Resources/utilities PWD=/Users/snap/Downloads LANG=en_US.UTF-8 SHLVL=1 SUDO_COMMAND=/usr/bin/su HOME=/var/root COLORFGBG=15;0 LC_TERMINAL_VERSION=3.6.6 LOGNAME=root SUDO_GID=20 LC_TERMINAL=iTerm2 COLORTERM=truecolor _=/usr/bin/smbutil OLDPWD=/Users/snap ","env_count":"22","euid":"0","event_type":"exec","exit_code":"","gid":"0","global_seq_num":"4974","original_parent":"40024","parent":"40024","parent_pidversion":"105354","path":"/usr/bin/smbutil","pid":"44241","pidversion":"116042","platform_binary":"1","responsible_pid":"29792","responsible_pidversion":"83076","seq_num":"2152","session_id":"38273","signing_id":"com.apple.smbutil","team_id":"","time":"1771509052","uid":"0","username":"root","version":"8"},"action":"added"}
{"name":"es_process_events","hostIdentifier":"MacBookPro","calendarTime":"Thu Feb 19 13:50:29 2026 UTC","unixTime":1771509029,"epoch":0,"counter":697,"numerics":false,"columns":{"cdhash":"81dc01aa177c30e140e17d5c29dd22e0e7407427","child_pid":"","cmdline":"","cmdline_count":"0","codesigning_flags":"","cwd":"","egid":"0","env":"","env_count":"0","euid":"0","event_type":"exit","exit_code":"256","gid":"0","global_seq_num":"4950","original_parent":"40024","parent":"40024","parent_pidversion":"105354","path":"/usr/bin/smbutil","pid":"44234","pidversion":"116024","platform_binary":"1","responsible_pid":"29792","responsible_pidversion":"83076","seq_num":"1404","session_id":"38273","signing_id":"com.apple.smbutil","team_id":"","time":"1771509021","uid":"0","username":"root","version":"8"},"action":"added"}
{"name":"es_process_events","hostIdentifier":"MacBookPro","calendarTime":"Thu Feb 19 13:50:29 2026 UTC","unixTime":1771509029,"epoch":0,"counter":697,"numerics":false,"columns":{"cdhash":"81dc01aa177c30e140e17d5c29dd22e0e7407427","child_pid":"","cmdline":"smbutil lookup -a ","cmdline_count":"3","codesigning_flags":"","cwd":"/Users/snap/Downloads","egid":"0","env":"SHELL=/bin/sh TERM=xterm-256color USER=root SUDO_USER=snap SUDO_UID=501 SSH_AUTH_SOCK=/private/tmp/com.apple.launchd.614sLX07yb/Listeners __CF_USER_TEXT_ENCODING=0x0:0:0 MAIL=/var/mail/root PATH=/Users/snap/.local/bin:/usr/local/bin:/System/Cryptexes/App/usr/bin:/usr/bin:/bin:/usr/sbin:/sbin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/local/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/appleinternal/bin:/opt/homebrew/bin:/Applications/iTerm.app/Contents/Resources/utilities PWD=/Users/snap/Downloads LANG=en_US.UTF-8 SHLVL=1 SUDO_COMMAND=/usr/bin/su HOME=/var/root COLORFGBG=15;0 LC_TERMINAL_VERSION=3.6.6 LOGNAME=root SUDO_GID=20 LC_TERMINAL=iTerm2 COLORTERM=truecolor _=/usr/bin/smbutil OLDPWD=/Users/snap ","env_count":"22","euid":"0","event_type":"exec","exit_code":"","gid":"0","global_seq_num":"4949","original_parent":"40024","parent":"40024","parent_pidversion":"105354","path":"/usr/bin/smbutil","pid":"44234","pidversion":"116024","platform_binary":"1","responsible_pid":"29792","responsible_pidversion":"83076","seq_num":"2141","session_id":"38273","signing_id":"com.apple.smbutil","team_id":"","time":"1771509021","uid":"0","username":"root","version":"8"},"action":"added"}
{"name":"es_process_events","hostIdentifier":"MacBookPro","calendarTime":"Thu Feb 19 13:50:29 2026 UTC","unixTime":1771509029,"epoch":0,"counter":697,"numerics":false,"columns":{"cdhash":"81dc01aa177c30e140e17d5c29dd22e0e7407427","child_pid":"","cmdline":"","cmdline_count":"0","codesigning_flags":"","cwd":"","egid":"0","env":"","env_count":"0","euid":"0","event_type":"exit","exit_code":"0","gid":"0","global_seq_num":"4947","original_parent":"40024","parent":"40024","parent_pidversion":"105354","path":"/usr/bin/smbutil","pid":"44233","pidversion":"116022","platform_binary":"1","responsible_pid":"29792","responsible_pidversion":"83076","seq_num":"1403","session_id":"38273","signing_id":"com.apple.smbutil","team_id":"","time":"1771509021","uid":"0","username":"root","version":"8"},"action":"added"}
{"name":"es_process_events","hostIdentifier":"MacBookPro","calendarTime":"Thu Feb 19 13:50:29 2026 UTC","unixTime":1771509029,"epoch":0,"counter":697,"numerics":false,"columns":{"cdhash":"81dc01aa177c30e140e17d5c29dd22e0e7407427","child_pid":"","cmdline":"smbutil statshares -a ","cmdline_count":"3","codesigning_flags":"","cwd":"/Users/snap/Downloads","egid":"0","env":"SHELL=/bin/sh TERM=xterm-256color USER=root SUDO_USER=snap SUDO_UID=501 SSH_AUTH_SOCK=/private/tmp/com.apple.launchd.614sLX07yb/Listeners __CF_USER_TEXT_ENCODING=0x0:0:0 MAIL=/var/mail/root PATH=/Users/snap/.local/bin:/usr/local/bin:/System/Cryptexes/App/usr/bin:/usr/bin:/bin:/usr/sbin:/sbin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/local/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/appleinternal/bin:/opt/homebrew/bin:/Applications/iTerm.app/Contents/Resources/utilities PWD=/Users/snap/Downloads LANG=en_US.UTF-8 SHLVL=1 SUDO_COMMAND=/usr/bin/su HOME=/var/root COLORFGBG=15;0 LC_TERMINAL_VERSION=3.6.6 LOGNAME=root SUDO_GID=20 LC_TERMINAL=iTerm2 COLORTERM=truecolor _=/usr/bin/smbutil OLDPWD=/Users/snap ","env_count":"22","euid":"0","event_type":"exec","exit_code":"","gid":"0","global_seq_num":"4946","original_parent":"40024","parent":"40024","parent_pidversion":"105354","path":"/usr/bin/smbutil","pid":"44233","pidversion":"116022","platform_binary":"1","responsible_pid":"29792","responsible_pidversion":"83076","seq_num":"2140","session_id":"38273","signing_id":"com.apple.smbutil","team_id":"","time":"1771509021","uid":"0","username":"root","version":"8"},"action":"added"}
{"name":"es_process_events","hostIdentifier":"MacBookPro","calendarTime":"Thu Feb 19 13:50:29 2026 UTC","unixTime":1771509029,"epoch":0,"counter":697,"numerics":false,"columns":{"cdhash":"81dc01aa177c30e140e17d5c29dd22e0e7407427","child_pid":"","cmdline":"smbutil statshares -a ","cmdline_count":"3","codesigning_flags":"","cwd":"/Users/snap/Downloads","egid":"0","env":"SHELL=/bin/sh TERM=xterm-256color USER=root SUDO_USER=snap SUDO_UID=501 SSH_AUTH_SOCK=/private/tmp/com.apple.launchd.614sLX07yb/Listeners __CF_USER_TEXT_ENCODING=0x0:0:0 MAIL=/var/mail/root PATH=/Users/snap/.local/bin:/usr/local/bin:/System/Cryptexes/App/usr/bin:/usr/bin:/bin:/usr/sbin:/sbin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/local/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/appleinternal/bin:/opt/homebrew/bin:/Applications/iTerm.app/Contents/Resources/utilities PWD=/Users/snap/Downloads LANG=en_US.UTF-8 SHLVL=1 SUDO_COMMAND=/usr/bin/su HOME=/var/root COLORFGBG=15;0 LC_TERMINAL_VERSION=3.6.6 LOGNAME=root SUDO_GID=20 LC_TERMINAL=iTerm2 COLORTERM=truecolor _=/usr/bin/smbutil OLDPWD=/Users/snap ","env_count":"22","euid":"0","event_type":"exec","exit_code":"","gid":"0","global_seq_num":"4946","original_parent":"40024","parent":"40024","parent_pidversion":"105354","path":"/usr/bin/smbutil","pid":"44233","pidversion":"116022","platform_binary":"1","responsible_pid":"29792","responsible_pidversion":"83076","seq_num":"2140","session_id":"38273","signing_id":"com.apple.smbutil","team_id":"","time":"1771509021","uid":"0","username":"root","version":"8"},"action":"added"}