154100x80000000000000001932524Linux-Sysmon/Operationalar-linux-2022-08-09 10:43:52.642{ec23eae3-3a68-62f2-f06c-97aa35560000}10297/usr/bin/gawk-----gawk BEGIN {system("/bin/bash")}/home/ubunturoot{ec23eae3-0000-0000-0000-000000000000}013no level-{ec23eae3-3a68-62f2-084e-02abcc550000}10296/usr/bin/sudosudoubuntu
154100x80000000000000001932517Linux-Sysmon/Operationalar-linux-2022-08-09 10:43:52.631{ec23eae3-3a68-62f2-084e-02abcc550000}10296/usr/bin/sudo-----sudo gawk BEGIN {system("/bin/bash")}/home/ubuntuubuntu{ec23eae3-315b-62f2-e803-000000000000}100013no level-{ec23eae3-315b-62f2-4884-4ea587550000}15369/bin/bash-bashubuntu
154100x80000000000000001931787Linux-Sysmon/Operationalar-linux-2022-08-09 10:43:46.333{ec23eae3-3a62-62f2-f02c-24fc3a560000}10293/usr/bin/gawk-----gawk BEGIN {system("/bin/sh")}/home/ubunturoot{ec23eae3-0000-0000-0000-000000000000}013no level-{ec23eae3-3a62-62f2-082e-9bcfe9550000}10292/usr/bin/sudosudoubuntu
154100x80000000000000001931743Linux-Sysmon/Operationalar-linux-2022-08-09 10:43:46.319{ec23eae3-3a62-62f2-082e-9bcfe9550000}10292/usr/bin/sudo-----sudo gawk BEGIN {system("/bin/sh")}/home/ubuntuubuntu{ec23eae3-315b-62f2-e803-000000000000}100013no level-{ec23eae3-315b-62f2-4884-4ea587550000}15369/bin/bash-bashubuntu