type=EXECVE msg=audit(02/20/2025 13:31:41.670:153632) : argc=3 a0=modprobe a1=-r a2=rootkit 
type=EXECVE msg=audit(02/20/2025 13:31:41.647:153613) : argc=4 a0=sudo a1=modprobe a2=-r a3=rootkit 
type=EXECVE msg=audit(02/20/2025 13:06:23.547:103829) : argc=3 a0=modprobe a1=-r a2=rootkit 
type=EXECVE msg=audit(02/20/2025 13:06:23.547:103829) : argc=3 a0=modprobe a1=-r a2=rootkit 
type=EXECVE msg=audit(02/20/2025 13:06:23.526:103810) : argc=4 a0=sudo a1=modprobe a2=-r a3=rootkit 
type=EXECVE msg=audit(02/20/2025 13:06:23.526:103810) : argc=4 a0=sudo a1=modprobe a2=-r a3=rootkit 
type=EXECVE msg=audit(02/20/2025 10:00:26.469:44962) : argc=3 a0=modprobe a1=-r a2=rootkit 
type=EXECVE msg=audit(02/20/2025 10:00:26.452:44943) : argc=4 a0=sudo a1=modprobe a2=-r a3=rootkit