_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24696    15292    ?    Ss    Jan08    0:02    23:55:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:55:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:33    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:33    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:33    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:55:33    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:55:33    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:55:33    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-devfreq_wq]    <noArgs>
root    69    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/1:1H-kblockd]    <noArgs>
root    70    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-mld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I    Jan08    0:04    23:55:32    [kworker/2:2-events]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/2:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:32    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/u25:0]    <noArgs>
root    204    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/3:1H-kblockd]    <noArgs>
root    209    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/0:1H-kblockd]    <noArgs>
root    236    0.0    0.0    0    0    ?    I    Jan08    0:04    23:55:32    [kworker/1:2-events]    <noArgs>
root    262    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-ata_sff]    <noArgs>
root    263    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [scsi_eh_0]    <noArgs>
root    264    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    265    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [scsi_eh_1]    <noArgs>
root    266    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    303    0.0    0.0    0    0    ?    S    Jan08    0:01    23:55:31    [jbd2/vda1-8]    <noArgs>
root    304    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    328    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [hwrng]    <noArgs>
root    383    0.0    0.3    58548    24880    ?    Ss    Jan08    0:00    23:55:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    414    0.0    0.0    90112    7456    ?    Ssl    Jan08    0:00    23:55:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    418    0.0    0.1    37452    12080    ?    Ss    Jan08    0:00    23:55:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    428    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:29    [psimon]    <noArgs>
root    562    0.0    0.0    8388    6324    ?    Ss    Jan08    0:01    23:55:28    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    606    0.0    0.0    10532    4524    ?    S    Jan08    0:00    23:55:28    dhcpcd:    eth0_[ip4]_[ip6]
root    607    0.0    0.0    10536    2444    ?    S    Jan08    0:00    23:55:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    608    0.0    0.0    10516    2048    ?    S    Jan08    0:00    23:55:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:55:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:28    [kworker/R-rpciod]    <noArgs>
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:28    [kworker/R-xprtiod]    <noArgs>
root    618    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    628    0.0    0.0    10536    2248    ?    S    Jan08    0:00    23:55:26    dhcpcd:    [BPF_ARP]_eth0_10.0.254.201
dhcpcd    629    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:55:26    dhcpcd:    [DHCP6_proxy]_fe80::408f:6226:16e4:1591
dhcpcd    649    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:55:22    dhcpcd:    [BOOTP_proxy]_10.0.254.201
root    741    0.0    0.0    309036    7308    ?    Ssl    Jan08    0:00    23:55:21    /usr/libexec/accounts-daemon    <noArgs>
root    743    0.0    0.0    6876    2720    ?    Ss    Jan08    0:00    23:55:21    /usr/sbin/cron    -f
messagebus    744    0.0    0.0    9956    6620    ?    Ss    Jan08    0:00    23:55:21    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    746    0.0    0.1    382480    10024    ?    Ssl    Jan08    0:01    23:55:21    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    748    0.0    0.0    80876    3888    ?    Ssl    Jan08    0:00    23:55:21    /usr/sbin/qemu-ga    <noArgs>
root    752    0.0    0.1    18348    9168    ?    Ss    Jan08    0:00    23:55:21    /usr/lib/systemd/systemd-logind    <noArgs>
root    785    0.0    0.2    336460    19068    ?    Ssl    Jan08    0:00    23:55:21    /usr/sbin/NetworkManager    --no-daemon
root    811    0.0    0.1    391064    12324    ?    Ssl    Jan08    0:00    23:55:21    /usr/sbin/ModemManager    <noArgs>
root    835    0.0    0.0    381356    7700    ?    Ssl    Jan08    0:00    23:55:21    /usr/sbin/lightdm    <noArgs>
root    843    0.0    0.2    1978552    20484    ?    Ssl    Jan08    0:18    23:55:21    /laforge.bin    <noArgs>
root    848    0.0    0.0    18320    4264    ?    S    Jan08    0:00    23:55:21    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    874    0.0    0.0    15652    2604    ?    S    Jan08    0:00    23:55:21    /usr/sbin/xrdp    <noArgs>
root    878    0.0    1.3    915128    106104    tty7    Ssl+    Jan08    0:02    23:55:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    881    0.0    0.0    8124    2468    tty1    Ss+    Jan08    0:00    23:55:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    902    0.0    0.1    169620    8172    ?    Sl    Jan08    0:00    23:55:20    lightdm    --session-child_17_20
lightdm    908    0.0    0.1    22464    12928    ?    Ss    Jan08    0:00    23:55:20    /usr/lib/systemd/systemd    --user
root    910    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:20    [psimon]    <noArgs>
lightdm    912    0.0    0.0    22712    3840    ?    S    Jan08    0:00    23:55:20    (sd-pam)    <noArgs>
lightdm    941    0.0    0.0    8348    4744    ?    Ss    Jan08    0:00    23:55:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    942    0.0    0.1    101224    10536    ?    S<sl    Jan08    0:00    23:55:20    /usr/bin/pipewire    <noArgs>
lightdm    943    0.0    1.2    666648    105340    ?    Ssl    Jan08    0:15    23:55:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    947    0.0    0.1    479288    16056    ?    S<sl    Jan08    0:00    23:55:20    /usr/bin/wireplumber    <noArgs>
lightdm    949    0.0    0.0    84704    5148    ?    Ssl    Jan08    0:00    23:55:20    /usr/bin/pipewire    -c_filter-chain.conf
rtkit    950    0.0    0.0    21492    3132    ?    SNsl    Jan08    0:00    23:55:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    951    0.0    0.1    98776    8240    ?    S<sl    Jan08    0:00    23:55:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    975    0.0    0.0    381080    7100    ?    Ssl    Jan08    0:00    23:55:19    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    988    0.0    0.0    8208    4448    ?    S    Jan08    0:00    23:55:19    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    993    0.0    0.1    312816    8192    ?    Ssl    Jan08    0:00    23:55:19    /usr/libexec/gvfsd    <noArgs>
lightdm    1009    0.0    0.0    398408    7376    ?    Sl    Jan08    0:00    23:55:19    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1033    0.0    0.0    14372    5684    ?    S    Jan08    0:00    23:55:19    lightdm    --session-child_13_20
lightdm    1035    0.0    0.0    168772    7020    ?    Sl    Jan08    0:00    23:55:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1062    0.2    1.8    379824    151816    ?    Sl    Jan08    3:19    23:55:18    splunkd    -p_8089_start
root    1065    0.0    0.2    135648    17888    ?    Ss    Jan08    0:03    23:55:18    [splunkd    pid=1062]_splunkd_-p_8089_start_[process-runner]
root    1954    0.0    0.0    2688    1768    ?    S    Jan08    0:00    23:54:45    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1955    0.1    11.0    1479696    894936    ?    Sl    Jan08    1:48    23:54:45    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    75997    0.0    0.0    0    0    ?    I    Jan08    0:00    16:09:33    [kworker/u20:2-writeback]    <noArgs>
root    92162    0.0    0.0    0    0    ?    I    Jan08    0:00    14:25:16    [kworker/u17:3-flush-254:0]    <noArgs>
root    135967    0.0    0.0    0    0    ?    I    00:06    0:00    09:53:57    [kworker/u20:0-flush-254:0]    <noArgs>
root    139286    0.0    0.0    0    0    ?    I    00:29    0:00    09:31:01    [kworker/u19:2-ext4-rsv-conversion]    <noArgs>
root    140382    0.0    0.0    0    0    ?    I    00:35    0:00    09:24:56    [kworker/u19:1-flush-254:0]    <noArgs>
root    140654    0.0    0.0    0    0    ?    I    00:36    0:00    09:24:18    [kworker/u20:1-flush-254:0]    <noArgs>
root    145702    0.0    0.0    0    0    ?    I    01:08    0:01    08:52:10    [kworker/0:1-events]    <noArgs>
root    169265    0.0    0.0    0    0    ?    I    03:36    0:00    06:24:35    [kworker/u17:0-writeback]    <noArgs>
root    171719    0.0    0.0    0    0    ?    I    03:51    0:00    06:08:54    [kworker/u19:0-writeback]    <noArgs>
root    194985    0.0    0.0    0    0    ?    I    06:19    0:00    03:41:32    [kworker/u18:1-ext4-rsv-conversion]    <noArgs>
root    198336    0.0    0.0    0    0    ?    I    06:39    0:00    03:21:47    [kworker/u17:2-events_unbound]    <noArgs>
root    228240    0.0    0.0    0    0    ?    I    09:47    0:00    12:58    [kworker/3:2-mm_percpu_wq]    <noArgs>
xrdp    228303    0.5    0.4    62248    38224    ?    S    09:48    0:03    12:14    /usr/sbin/xrdp    <noArgs>
root    228382    0.0    0.0    18320    4344    ?    S    09:49    0:00    11:27    /usr/sbin/xrdp-sesman    <noArgs>
pentester    228385    0.0    0.1    23084    13356    ?    Ss    09:49    0:00    11:27    /usr/lib/systemd/systemd    --user
pentester    228387    0.0    0.0    22592    3884    ?    S    09:49    0:00    11:27    (sd-pam)    <noArgs>
pentester    228407    0.0    0.0    8892    5680    ?    Ss    09:49    0:00    11:27    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
pentester    228408    0.0    0.0    97408    8124    ?    Ssl    09:49    0:00    11:27    /usr/bin/pipewire    <noArgs>
pentester    228409    0.0    1.2    630552    98124    ?    Sl    09:49    0:00    11:27    xfce4-session    <noArgs>
pentester    228410    0.2    1.7    390796    139724    ?    Sl    09:49    0:01    11:27    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    228413    0.0    0.0    7212    3460    ?    Ss    09:49    0:00    11:27    /usr/bin/mpris-proxy    <noArgs>
pentester    228414    0.0    0.1    399584    14296    ?    Ssl    09:49    0:00    11:27    /usr/bin/wireplumber    <noArgs>
pentester    228415    0.0    0.0    84704    5280    ?    Ssl    09:49    0:00    11:27    /usr/bin/pipewire    -c_filter-chain.conf
pentester    228416    0.0    0.1    99176    8916    ?    Ssl    09:49    0:00    11:27    /usr/bin/pipewire-pulse    <noArgs>
pentester    228439    0.0    0.0    95084    6216    ?    Sl    09:49    0:00    11:27    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    228516    0.0    0.0    10688    1856    ?    Ss    09:49    0:00    11:26    /usr/bin/ssh-agent    x-session-manager
pentester    228527    0.0    0.0    381172    7888    ?    Ssl    09:49    0:00    11:26    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    228534    0.0    0.0    8344    4932    ?    S    09:49    0:00    11:26    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    228545    0.0    0.0    168784    7588    ?    Sl    09:49    0:00    11:26    /usr/libexec/at-spi2-registryd    --use-gnome-session
pentester    228558    0.0    0.0    155488    3584    ?    SLsl    09:49    0:00    11:26    /usr/bin/gpg-agent    --supervised
pentester    228561    0.1    0.5    297312    48808    ?    Sl    09:49    0:01    11:26    xfwm4    <noArgs>
pentester    228566    0.0    0.0    312816    8000    ?    Ssl    09:49    0:00    11:26    /usr/libexec/gvfsd    <noArgs>
pentester    228572    0.0    0.0    398408    7516    ?    Sl    09:49    0:00    11:26    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    228581    0.0    0.3    348408    27240    ?    Sl    09:49    0:00    11:26    xfsettingsd    <noArgs>
pentester    228587    0.0    0.0    165276    5968    ?    Ssl    09:49    0:00    11:25    /usr/libexec/dconf-service    <noArgs>
pentester    228588    0.0    0.6    515208    52536    ?    Sl    09:49    0:00    11:25    xfce4-panel    <noArgs>
pentester    228597    0.0    0.3    420204    26196    ?    Sl    09:49    0:00    11:25    Thunar    --daemon
pentester    228609    0.0    0.8    663284    69748    ?    Sl    09:49    0:00    11:25    xfdesktop    <noArgs>
pentester    228615    0.0    0.5    429004    44260    ?    Sl    09:49    0:00    11:25    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_14680071_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    228620    0.0    0.0    7180    3416    ?    S    09:49    0:00    11:25    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    228625    0.0    0.2    405608    19396    ?    Sl    09:49    0:00    11:25    xfce4-power-manager    <noArgs>
pentester    228629    0.0    0.4    281548    36888    ?    Sl    09:49    0:00    11:25    xfce4-screensaver    <noArgs>
pentester    228633    0.0    0.4    606504    37692    ?    Sl    09:49    0:00    11:25    diodon    <noArgs>
pentester    228636    0.0    0.0    12432    1968    ?    Ssl    09:49    0:00    11:25    xcape    -e_Super_L_Control_L_Escape
pentester    228639    0.0    0.7    604468    61616    ?    Sl    09:49    0:00    11:25    /usr/bin/python3    /usr/bin/blueman-applet
pentester    228642    0.0    0.5    66232    41556    ?    S    09:49    0:00    11:25    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pentester    228647    0.0    0.2    481796    21460    ?    Ssl    09:49    0:00    11:25    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    228665    0.0    0.2    265304    18412    ?    Sl    09:49    0:00    11:25    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    228680    0.0    0.0    308560    6896    ?    Sl    09:49    0:00    11:25    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    228686    0.0    0.1    856944    8916    ?    Sl    09:49    0:00    11:25    xiccd    <noArgs>
pentester    228696    0.0    0.5    521396    43268    ?    Sl    09:49    0:00    11:25    nm-applet    <noArgs>
colord    228734    0.0    0.1    317060    14988    ?    Ssl    09:49    0:00    11:25    /usr/libexec/colord    <noArgs>
pentester    228744    0.0    0.0    95900    7648    ?    Sl    09:49    0:00    11:25    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
root    228756    0.0    0.1    318520    10168    ?    Ssl    09:49    0:00    11:25    /usr/libexec/upowerd    <noArgs>
pentester    228774    0.0    0.1    457840    8884    ?    Ssl    09:49    0:00    11:25    /usr/bin/zeitgeist-daemon    <noArgs>
pentester    228821    0.0    0.1    349660    13076    ?    Ssl    09:49    0:00    11:24    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    228831    0.1    0.7    310940    63956    ?    Sl    09:49    0:01    11:24    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_14680076_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    228832    0.0    0.4    499532    37916    ?    Sl    09:49    0:00    11:24    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_14680077_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    228833    0.2    0.3    272796    29124    ?    Sl    09:49    0:01    11:24    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_14680078_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    228834    0.0    0.4    359160    39488    ?    Sl    09:49    0:00    11:24    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_14680079_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    228836    0.0    0.4    425196    37548    ?    Sl    09:49    0:00    11:24    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_14680080_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    228840    0.0    0.4    286020    37480    ?    Sl    09:49    0:00    11:24    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_14680081_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    228855    0.0    0.4    425472    37428    ?    Sl    09:49    0:00    11:24    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_14680082_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    228931    0.0    0.1    538332    11968    ?    Ssl    09:49    0:00    11:23    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
root    228935    0.0    0.1    478372    13948    ?    Ssl    09:49    0:00    11:23    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    228947    0.0    0.0    307864    6496    ?    Ssl    09:49    0:00    11:23    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    228952    0.0    0.0    308884    7084    ?    Ssl    09:49    0:00    11:23    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    228957    0.0    0.0    307916    6716    ?    Ssl    09:49    0:00    11:23    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    228962    0.0    0.1    389944    8924    ?    Ssl    09:49    0:00    11:23    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    228976    0.0    0.0    168868    6640    ?    Ssl    09:49    0:00    11:23    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    228981    0.0    0.1    534256    9176    ?    Sl    09:49    0:00    11:23    /usr/libexec/gvfsd-trash    --spawner_:1.21_/org/gtk/gvfs/exec_spaw/0
pentester    229101    0.0    0.7    793524    57176    ?    Sl    09:49    0:00    11:14    /usr/bin/qterminal    <noArgs>
pentester    229103    0.0    0.2    557008    19944    ?    Ssl    09:49    0:00    11:14    /usr/libexec/xdg-desktop-portal    <noArgs>
pentester    229110    0.0    0.0    308740    6588    ?    Ssl    09:49    0:00    11:13    /usr/libexec/xdg-permission-store    <noArgs>
pentester    229118    0.0    0.0    539704    7200    ?    Ssl    09:49    0:00    11:13    /usr/libexec/xdg-document-portal    <noArgs>
root    229124    0.0    0.0    2592    2036    ?    Ss    09:49    0:00    11:13    fusermount3    -o_rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal_--_/run/user/1001/doc
pentester    229127    0.0    0.2    479576    19764    ?    Ssl    09:49    0:00    11:13    /usr/libexec/xdg-desktop-portal-gtk    <noArgs>
pentester    229139    0.1    0.0    10500    6456    pts/0    Ss+    09:49    0:00    11:13    /usr/bin/zsh    <noArgs>
root    229167    0.0    0.0    0    0    ?    I    09:49    0:00    11:13    [kworker/u18:0-flush-254:0]    <noArgs>
root    229433    0.0    0.0    0    0    ?    I    09:50    0:00    10:47    [kworker/2:0-ata_sff]    <noArgs>
root    230702    0.0    0.0    0    0    ?    I    09:51    0:00    09:31    [kworker/0:2-ata_sff]    <noArgs>
root    231681    0.0    0.0    0    0    ?    I    09:52    0:00    07:52    [kworker/3:0-ata_sff]    <noArgs>
root    232254    0.0    0.0    0    0    ?    I    09:53    0:00    06:53    [kworker/1:1-ata_sff]    <noArgs>
root    233810    0.0    0.0    0    0    ?    I    09:56    0:00    04:40    [kworker/2:1-ata_sff]    <noArgs>
root    234156    0.0    0.0    0    0    ?    I    09:56    0:00    04:04    [kworker/0:0-ata_sff]    <noArgs>
root    234941    0.0    0.0    0    0    ?    I    09:58    0:00    02:44    [kworker/u18:2-events_unbound]    <noArgs>
root    234997    0.0    0.0    0    0    ?    I    09:58    0:00    02:39    [kworker/3:1-ata_sff]    <noArgs>
root    235504    0.0    0.0    0    0    ?    I    09:59    0:00    01:47    [kworker/1:0-ata_sff]    <noArgs>
pentester    236587    0.0    0.0    5588    2008    ?    S    10:00    0:00    00:05    sleep    10
root    236670    0.0    0.0    2688    1748    ?    S    10:00    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    236671    0.0    0.0    2688    1836    ?    S    10:00    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    236692    0.0    0.0    9504    4296    ?    R    10:00    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    236693    0.0    0.0    5592    1980    ?    S    10:00    0:00    00:00    tee    /dev/null
root    236694    0.0    0.0    9472    4052    ?    S    10:00    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24704    14948    ?    Ss    Jan08    0:02    23:55:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:55:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:34    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:34    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:34    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:55:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:55:34    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:55:34    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:04    23:55:34    [kworker/3:1-events]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/2:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [kswapd0]    <noArgs>
root    74    0.0    0.0    0    0    ?    I    Jan08    0:04    23:55:33    [kworker/1:1-events]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/1:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/u25:0]    <noArgs>
root    175    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/3:1H-kblockd]    <noArgs>
root    208    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/0:1H-kblockd]    <noArgs>
root    235    0.0    0.0    0    0    ?    I    Jan08    0:04    23:55:32    [kworker/2:2-events]    <noArgs>
root    249    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-ata_sff]    <noArgs>
root    261    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [scsi_eh_0]    <noArgs>
root    262    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    263    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [scsi_eh_1]    <noArgs>
root    264    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    303    0.0    0.0    0    0    ?    S    Jan08    0:01    23:55:32    [jbd2/vda1-8]    <noArgs>
root    304    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [hwrng]    <noArgs>
root    382    0.0    0.3    58548    24700    ?    Ss    Jan08    0:00    23:55:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    414    0.0    0.0    90112    7416    ?    Ssl    Jan08    0:00    23:55:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    418    0.0    0.1    37452    12080    ?    Ss    Jan08    0:00    23:55:30    /usr/lib/systemd/systemd-udevd    <noArgs>
root    427    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:30    [psimon]    <noArgs>
root    553    0.0    0.0    8388    7704    ?    Ss    Jan08    0:01    23:55:29    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    605    0.0    0.0    10532    4524    ?    S    Jan08    0:00    23:55:29    dhcpcd:    eth0_[ip4]_[ip6]
root    606    0.0    0.0    10540    2504    ?    S    Jan08    0:00    23:55:29    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    607    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:55:29    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    608    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:55:29    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    610    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:29    [kworker/R-rpciod]    <noArgs>
root    611    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:29    [kworker/R-xprtiod]    <noArgs>
root    616    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    626    0.0    0.0    10540    2248    ?    S    Jan08    0:00    23:55:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.202
dhcpcd    627    0.0    0.0    10540    2376    ?    S    Jan08    0:00    23:55:27    dhcpcd:    [DHCP6_proxy]_fe80::7db5:d5b3:cd73:6d0
dhcpcd    646    0.0    0.0    10540    2376    ?    S    Jan08    0:00    23:55:22    dhcpcd:    [BOOTP_proxy]_10.0.254.202
root    739    0.0    0.0    309036    7116    ?    Ssl    Jan08    0:00    23:55:22    /usr/libexec/accounts-daemon    <noArgs>
root    741    0.0    0.0    6876    2752    ?    Ss    Jan08    0:00    23:55:22    /usr/sbin/cron    -f
messagebus    742    0.0    0.0    10084    6548    ?    Ss    Jan08    0:00    23:55:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    745    0.0    0.1    382480    10012    ?    Ssl    Jan08    0:01    23:55:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    746    0.0    0.0    80876    3912    ?    Ssl    Jan08    0:00    23:55:22    /usr/sbin/qemu-ga    <noArgs>
root    749    0.0    0.1    18352    9140    ?    Ss    Jan08    0:00    23:55:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    772    0.0    0.2    336480    19024    ?    Ssl    Jan08    0:00    23:55:22    /usr/sbin/NetworkManager    --no-daemon
root    809    0.0    0.1    391064    12472    ?    Ssl    Jan08    0:00    23:55:22    /usr/sbin/ModemManager    <noArgs>
root    837    0.0    0.0    381356    7656    ?    Ssl    Jan08    0:00    23:55:22    /usr/sbin/lightdm    <noArgs>
root    841    0.0    0.2    1978552    20740    ?    Ssl    Jan08    0:18    23:55:22    /laforge.bin    <noArgs>
root    850    0.0    0.0    18320    4196    ?    S    Jan08    0:00    23:55:22    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    872    0.0    0.0    15652    2388    ?    S    Jan08    0:00    23:55:21    /usr/sbin/xrdp    <noArgs>
root    879    0.0    0.0    8124    2672    tty1    Ss+    Jan08    0:00    23:55:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    880    0.0    1.3    915128    106112    tty7    Ssl+    Jan08    0:02    23:55:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    900    0.0    0.0    169620    8124    ?    Sl    Jan08    0:00    23:55:20    lightdm    --session-child_17_20
lightdm    906    0.0    0.1    22880    13028    ?    Ss    Jan08    0:00    23:55:20    /usr/lib/systemd/systemd    --user
root    908    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:20    [psimon]    <noArgs>
lightdm    910    0.0    0.0    22712    3816    ?    S    Jan08    0:00    23:55:20    (sd-pam)    <noArgs>
lightdm    933    0.0    0.0    8348    4752    ?    Ss    Jan08    0:00    23:55:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    934    0.0    0.1    101208    10820    ?    S<sl    Jan08    0:00    23:55:20    /usr/bin/pipewire    <noArgs>
rtkit    936    0.0    0.0    21492    3116    ?    SNsl    Jan08    0:00    23:55:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    937    0.0    0.1    479284    16040    ?    S<sl    Jan08    0:00    23:55:20    /usr/bin/wireplumber    <noArgs>
lightdm    938    0.0    0.0    84704    5200    ?    Ssl    Jan08    0:00    23:55:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    939    0.0    0.0    98776    8052    ?    S<sl    Jan08    0:00    23:55:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    943    0.0    1.2    666648    105268    ?    Ssl    Jan08    0:15    23:55:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    968    0.0    0.0    381080    7196    ?    Ssl    Jan08    0:00    23:55:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    982    0.0    0.0    8208    4412    ?    S    Jan08    0:00    23:55:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    985    0.0    0.0    312816    7816    ?    Ssl    Jan08    0:00    23:55:20    /usr/libexec/gvfsd    <noArgs>
lightdm    993    0.0    0.0    398408    7452    ?    Sl    Jan08    0:00    23:55:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1027    0.0    0.0    14372    5812    ?    S    Jan08    0:00    23:55:20    lightdm    --session-child_13_20
lightdm    1029    0.0    0.0    168772    7028    ?    Sl    Jan08    0:00    23:55:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1060    0.2    1.8    379824    150560    ?    Sl    Jan08    3:14    23:55:18    splunkd    -p_8089_start
root    1063    0.0    0.2    135648    18028    ?    Ss    Jan08    0:04    23:55:18    [splunkd    pid=1060]_splunkd_-p_8089_start_[process-runner]
root    1950    0.0    0.0    2688    1744    ?    S    Jan08    0:00    23:54:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1951    0.1    12.1    1545232    991432    ?    Sl    Jan08    1:36    23:54:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    33053    0.0    0.0    0    0    ?    I    Jan08    0:00    20:39:33    [kworker/u20:0-flush-254:0]    <noArgs>
root    69632    0.0    0.0    0    0    ?    I    Jan08    0:03    16:49:46    [kworker/0:0-events]    <noArgs>
root    108912    0.0    0.0    0    0    ?    I    Jan08    0:00    12:40:26    [kworker/u18:2-flush-254:0]    <noArgs>
root    124738    0.0    0.0    0    0    ?    I    Jan08    0:00    11:02:26    [kworker/u20:2-ext4-rsv-conversion]    <noArgs>
root    125614    0.0    0.0    0    0    ?    I    Jan08    0:00    10:55:16    [kworker/u18:0-writeback]    <noArgs>
root    175172    0.0    0.0    0    0    ?    I    04:14    0:00    05:46:16    [kworker/u19:0-flush-254:0]    <noArgs>
root    198775    0.0    0.0    0    0    ?    I    06:41    0:00    03:19:18    [kworker/u19:1-events_unbound]    <noArgs>
root    199618    0.0    0.0    0    0    ?    I    06:48    0:00    03:12:29    [kworker/u17:0-kvfree_rcu_reclaim]    <noArgs>
root    201869    0.0    0.0    0    0    ?    I    07:02    0:00    02:58:17    [kworker/u19:2-kvfree_rcu_reclaim]    <noArgs>
root    215200    0.0    0.0    0    0    ?    I    08:25    0:00    01:35:17    [kworker/u17:1-ext4-rsv-conversion]    <noArgs>
root    224348    0.0    0.0    0    0    ?    I    09:21    0:00    39:35    [kworker/u18:1-flush-254:0]    <noArgs>
root    229131    0.0    0.0    0    0    ?    I    09:51    0:00    08:53    [kworker/1:0-ata_sff]    <noArgs>
xrdp    229148    1.1    0.4    61976    38024    ?    S    09:51    0:06    08:49    /usr/sbin/xrdp    <noArgs>
root    229182    0.0    0.0    18320    4252    ?    S    09:52    0:00    08:22    /usr/sbin/xrdp-sesman    <noArgs>
pentester    229185    0.0    0.1    22900    13264    ?    Ss    09:52    0:00    08:22    /usr/lib/systemd/systemd    --user
pentester    229187    0.0    0.0    22592    3832    ?    S    09:52    0:00    08:22    (sd-pam)    <noArgs>
pentester    229207    0.0    0.0    8880    5696    ?    Ss    09:52    0:00    08:22    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
pentester    229208    0.0    0.0    97360    8052    ?    Ssl    09:52    0:00    08:22    /usr/bin/pipewire    <noArgs>
pentester    229209    0.0    1.2    630544    98040    ?    Sl    09:52    0:00    08:22    xfce4-session    <noArgs>
pentester    229210    0.5    1.9    412080    160092    ?    Sl    09:52    0:02    08:22    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    229213    0.0    0.0    7212    3536    ?    Ss    09:52    0:00    08:22    /usr/bin/mpris-proxy    <noArgs>
pentester    229214    0.0    0.1    399532    14292    ?    Ssl    09:52    0:00    08:22    /usr/bin/wireplumber    <noArgs>
pentester    229215    0.0    0.0    84704    5204    ?    Ssl    09:52    0:00    08:22    /usr/bin/pipewire    -c_filter-chain.conf
pentester    229218    0.0    0.1    99176    8796    ?    Ssl    09:52    0:00    08:22    /usr/bin/pipewire-pulse    <noArgs>
pentester    229239    0.0    0.0    95084    6244    ?    Sl    09:52    0:00    08:21    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    229331    0.0    0.0    10688    1824    ?    Ss    09:52    0:00    08:21    /usr/bin/ssh-agent    x-session-manager
pentester    229342    0.0    0.0    381172    7760    ?    Ssl    09:52    0:00    08:21    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    229349    0.0    0.0    8344    4868    ?    S    09:52    0:00    08:21    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    229360    0.0    0.0    168784    7580    ?    Sl    09:52    0:00    08:21    /usr/libexec/at-spi2-registryd    --use-gnome-session
pentester    229373    0.0    0.0    155488    3572    ?    SLsl    09:52    0:00    08:21    /usr/bin/gpg-agent    --supervised
pentester    229376    0.1    0.5    297312    48624    ?    Sl    09:52    0:00    08:21    xfwm4    <noArgs>
pentester    229381    0.0    0.0    312816    8076    ?    Ssl    09:52    0:00    08:21    /usr/libexec/gvfsd    <noArgs>
pentester    229387    0.0    0.0    398408    7524    ?    Sl    09:52    0:00    08:21    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    229396    0.0    0.3    348408    27280    ?    Sl    09:52    0:00    08:20    xfsettingsd    <noArgs>
pentester    229402    0.0    0.0    165276    5944    ?    Ssl    09:52    0:00    08:20    /usr/libexec/dconf-service    <noArgs>
pentester    229403    0.1    0.6    515208    52764    ?    Sl    09:52    0:00    08:20    xfce4-panel    <noArgs>
pentester    229412    0.0    0.3    485740    26316    ?    Sl    09:52    0:00    08:20    Thunar    --daemon
pentester    229425    0.1    0.8    663288    70452    ?    Sl    09:52    0:00    08:20    xfdesktop    <noArgs>
pentester    229430    0.0    0.5    502036    42912    ?    Sl    09:52    0:00    08:20    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_14680071_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    229435    0.0    0.0    7180    3420    ?    S    09:52    0:00    08:20    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    229440    0.0    0.2    405608    19332    ?    Sl    09:52    0:00    08:20    xfce4-power-manager    <noArgs>
pentester    229441    0.0    0.4    281548    35460    ?    Sl    09:52    0:00    08:20    xfce4-screensaver    <noArgs>
pentester    229446    0.0    0.4    614700    37880    ?    Sl    09:52    0:00    08:20    diodon    <noArgs>
pentester    229450    0.0    0.0    12432    2176    ?    Ssl    09:52    0:00    08:20    xcape    -e_Super_L_Control_L_Escape
pentester    229451    0.0    0.7    604468    61820    ?    Sl    09:52    0:00    08:20    /usr/bin/python3    /usr/bin/blueman-applet
pentester    229453    0.0    0.5    66232    41368    ?    S    09:52    0:00    08:20    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pentester    229458    0.0    0.2    481796    21476    ?    Ssl    09:52    0:00    08:20    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    229467    0.0    0.2    265304    18336    ?    Sl    09:52    0:00    08:20    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    229483    0.0    0.0    308560    6784    ?    Sl    09:52    0:00    08:20    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    229489    0.0    0.1    308200    8912    ?    Sl    09:52    0:00    08:20    xiccd    <noArgs>
pentester    229520    0.0    0.5    586932    43176    ?    Sl    09:52    0:00    08:20    nm-applet    <noArgs>
colord    229526    0.0    0.1    317060    15356    ?    Ssl    09:52    0:00    08:20    /usr/libexec/colord    <noArgs>
root    229542    0.0    0.1    318516    10056    ?    Ssl    09:52    0:00    08:20    /usr/libexec/upowerd    <noArgs>
pentester    229573    0.0    0.1    458460    9964    ?    Ssl    09:52    0:00    08:20    /usr/bin/zeitgeist-daemon    <noArgs>
pentester    229578    0.0    0.0    95896    7600    ?    Sl    09:52    0:00    08:20    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
pentester    229622    0.0    0.2    352692    20444    ?    Ssl    09:52    0:00    08:20    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    229638    0.1    0.7    311268    65080    ?    Sl    09:52    0:00    08:19    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_14680076_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    229640    0.0    0.4    499532    38352    ?    Sl    09:52    0:00    08:19    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_14680077_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    229641    0.2    0.3    272796    29028    ?    Sl    09:52    0:01    08:19    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_14680078_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    229643    0.0    0.4    359160    39140    ?    Sl    09:52    0:00    08:19    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_14680079_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    229646    0.0    0.4    425196    37652    ?    Sl    09:52    0:00    08:19    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_14680080_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    229653    0.0    0.4    286020    37592    ?    Sl    09:52    0:00    08:19    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_14680081_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    229661    0.0    0.4    425472    37684    ?    Sl    09:52    0:00    08:19    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_14680082_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    229731    0.0    0.1    538332    11952    ?    Ssl    09:52    0:00    08:18    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
root    229735    0.0    0.1    478376    14008    ?    Ssl    09:52    0:00    08:18    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    229755    0.0    0.0    307864    6524    ?    Ssl    09:52    0:00    08:18    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    229760    0.0    0.0    308884    7140    ?    Ssl    09:52    0:00    08:18    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    229765    0.0    0.0    307916    6724    ?    Ssl    09:52    0:00    08:18    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    229770    0.0    0.1    389944    8708    ?    Ssl    09:52    0:00    08:18    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    229784    0.0    0.0    168868    6876    ?    Ssl    09:52    0:00    08:18    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    229788    0.0    0.1    534256    9096    ?    Sl    09:52    0:00    08:18    /usr/libexec/gvfsd-trash    --spawner_:1.21_/org/gtk/gvfs/exec_spaw/0
pentester    229816    3.3    5.3    3131536    437172    ?    Sl    09:52    0:16    08:15    /usr/lib/firefox-esr/firefox-esr    <noArgs>
pentester    229829    0.0    0.0    20868    3096    ?    Sl    09:52    0:00    08:15    /usr/lib/firefox-esr/crashhelper    229816_9_/tmp/_11
pentester    229868    0.0    0.2    557248    19816    ?    Ssl    09:52    0:00    08:15    /usr/libexec/xdg-desktop-portal    <noArgs>
pentester    229878    0.0    0.0    308740    6720    ?    Ssl    09:52    0:00    08:15    /usr/libexec/xdg-permission-store    <noArgs>
pentester    229883    0.0    0.0    614476    7044    ?    Ssl    09:52    0:00    08:15    /usr/libexec/xdg-document-portal    <noArgs>
root    229890    0.0    0.0    2592    2016    ?    Ss    09:52    0:00    08:14    fusermount3    -o_rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal_--_/run/user/1001/doc
pentester    229896    0.0    0.2    479576    19756    ?    Ssl    09:52    0:00    08:14    /usr/libexec/xdg-desktop-portal-gtk    <noArgs>
pentester    229925    0.0    0.5    235288    43912    ?    Sl    09:52    0:00    08:14    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:26899_-prefMapHandle_1:268701_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{19037c6f-5223-40b7-b1fc-c5c15ac69c21}_-parentPid_229816_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_1_socket
pentester    229965    0.0    1.2    2466428    102572    ?    Sl    09:52    0:00    08:14    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:27829_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{6eb6c2ef-6e23-4231-9dd9-70961edab474}_-parentPid_229816_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_2_tab
pentester    229970    0.0    0.6    373380    51580    ?    Sl    09:52    0:00    08:14    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:27874_-prefMapHandle_1:268701_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{5a553696-d64e-4585-91df-5c23c429c1a4}_-parentPid_229816_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_3_rdd
pentester    230002    0.2    1.4    2466284    116828    ?    Sl    09:52    0:01    08:14    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:28024_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{871bbc97-a648-48ff-a7f6-00069d3d2647}_-parentPid_229816_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_4_tab
pentester    230062    0.0    0.5    232684    41872    ?    Sl    09:52    0:00    08:12    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-sandboxingKind_0_-prefsHandle_0:39302_-prefMapHandle_1:268701_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{a13714ad-1669-4650-845c-7ba6cfa3bd34}_-parentPid_229816_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_5_utility
pentester    230079    0.0    0.9    2436088    81292    ?    Sl    09:52    0:00    08:12    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:37592_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{6ceac4ca-6574-4e45-a4fc-d84ea6e1d0f2}_-parentPid_229816_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_6_tab
pentester    230088    0.0    0.9    2429896    80896    ?    Sl    09:52    0:00    08:12    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:37829_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{d0c53c9d-c55d-4e17-ade2-17dc3943ea1b}_-parentPid_229816_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_7_tab
pentester    230096    0.0    0.9    2429896    80772    ?    Sl    09:52    0:00    08:12    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:37829_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{ce6b9f12-38fd-4d84-aba8-bb58067e89a0}_-parentPid_229816_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_8_tab
pentester    230145    0.1    1.8    2502908    146620    ?    Sl    09:52    0:00    08:12    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:39740_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{fdd50673-489c-4db9-80ef-13f926131742}_-parentPid_229816_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_9_tab
root    230249    0.0    0.0    0    0    ?    I    09:52    0:00    08:07    [kworker/2:0-ata_sff]    <noArgs>
root    230419    0.0    0.0    0    0    ?    I    09:52    0:00    07:51    [kworker/u17:2-flush-254:0]    <noArgs>
root    231078    0.0    0.0    0    0    ?    I    09:54    0:00    06:46    [kworker/3:2-ata_sff]    <noArgs>
root    231410    0.0    0.0    0    0    ?    I    09:54    0:00    06:12    [kworker/u20:3-flush-254:0]    <noArgs>
root    231745    0.0    0.0    0    0    ?    I    09:55    0:00    05:39    [kworker/0:1-ata_sff]    <noArgs>
root    233090    0.0    0.0    0    0    ?    I    09:57    0:00    03:44    [kworker/1:2-ata_sff]    <noArgs>
root    233558    0.0    0.0    0    0    ?    I    09:57    0:00    02:58    [kworker/2:1-ata_sff]    <noArgs>
pentester    234225    0.4    0.7    805480    57832    ?    Sl    09:58    0:00    01:52    /usr/bin/qterminal    <noArgs>
pentester    234240    0.8    0.0    10504    6440    pts/0    Ss+    09:58    0:00    01:52    /usr/bin/zsh    <noArgs>
root    234848    0.0    0.0    0    0    ?    I    09:59    0:00    01:13    [kworker/3:0-ata_sff]    <noArgs>
root    235475    0.0    0.0    0    0    ?    I    10:00    0:00    00:27    [kworker/0:2-ata_sff]    <noArgs>
pentester    235865    0.0    0.0    5588    2084    ?    S    10:00    0:00    00:00    sleep    10
root    235866    0.0    0.0    2688    1788    ?    S    10:00    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    235867    0.0    0.0    2688    1836    ?    S    10:00    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    235888    0.0    0.0    9504    4376    ?    R    10:00    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    235889    0.0    0.0    5592    1932    ?    S    10:00    0:00    00:00    tee    /dev/null
root    235890    0.0    0.0    9472    4068    ?    S    10:00    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}

_sourcetype: ps

source: ps

sourcetype: ps


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24604    15440    ?    Ss    Jan08    0:02    23:55:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:06    23:55:33    [kworker/0:1-mm_percpu_wq]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:55:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [ksoftirqd/3]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:33    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:33    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:33    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:55:33    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:55:33    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:55:33    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-tpm_dev_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-edac-poller]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-devfreq_wq]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/0:1H-kblockd]    <noArgs>
root    69    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-mld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I    Jan08    0:05    23:55:32    [kworker/2:2-mm_percpu_wq]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/2:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:32    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/u25:0]    <noArgs>
root    204    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/3:1H-kblockd]    <noArgs>
root    209    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/1:1H-kblockd]    <noArgs>
root    245    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-ata_sff]    <noArgs>
root    251    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [scsi_eh_0]    <noArgs>
root    252    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    257    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [scsi_eh_1]    <noArgs>
root    258    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    271    0.0    0.0    0    0    ?    I    Jan08    0:05    23:55:31    [kworker/1:2-events]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:55:31    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [hwrng]    <noArgs>
root    385    0.0    0.3    58548    24860    ?    Ss    Jan08    0:00    23:55:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    416    0.0    0.0    90112    7460    ?    Ssl    Jan08    0:00    23:55:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    419    0.0    0.1    37452    12104    ?    Ss    Jan08    0:00    23:55:30    /usr/lib/systemd/systemd-udevd    <noArgs>
root    427    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:29    [psimon]    <noArgs>
root    568    0.0    0.0    8388    5040    ?    Ss    Jan08    0:01    23:55:29    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    609    0.0    0.0    10532    4524    ?    S    Jan08    0:00    23:55:28    dhcpcd:    eth0_[ip4]_[ip6]
root    610    0.0    0.0    10536    2504    ?    S    Jan08    0:00    23:55:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    611    0.0    0.0    10516    2080    ?    S    Jan08    0:00    23:55:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    612    0.0    0.0    10516    2136    ?    S    Jan08    0:00    23:55:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    614    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:28    [kworker/R-rpciod]    <noArgs>
root    615    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:28    [kworker/R-xprtiod]    <noArgs>
root    620    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    630    0.0    0.0    10536    2220    ?    S    Jan08    0:00    23:55:27    dhcpcd:    [BPF_ARP]_eth0_10.0.254.205
dhcpcd    631    0.0    0.0    10536    2348    ?    S    Jan08    0:00    23:55:26    dhcpcd:    [DHCP6_proxy]_fe80::40a5:57cd:1493:bb0f
dhcpcd    650    0.0    0.0    10536    2348    ?    S    Jan08    0:00    23:55:22    dhcpcd:    [BOOTP_proxy]_10.0.254.205
root    743    0.0    0.0    309036    7184    ?    Ssl    Jan08    0:00    23:55:22    /usr/libexec/accounts-daemon    <noArgs>
root    745    0.0    0.0    6876    2784    ?    Ss    Jan08    0:00    23:55:22    /usr/sbin/cron    -f
messagebus    747    0.0    0.0    9936    6608    ?    Ss    Jan08    0:00    23:55:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    749    0.0    0.1    382480    10060    ?    Ssl    Jan08    0:02    23:55:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    750    0.0    0.0    80876    3992    ?    Ssl    Jan08    0:00    23:55:22    /usr/sbin/qemu-ga    <noArgs>
root    753    0.0    0.1    18480    9180    ?    Ss    Jan08    0:00    23:55:21    /usr/lib/systemd/systemd-logind    <noArgs>
root    793    0.0    0.2    336468    18700    ?    Ssl    Jan08    0:00    23:55:21    /usr/sbin/NetworkManager    --no-daemon
root    816    0.0    0.1    391060    12380    ?    Ssl    Jan08    0:00    23:55:21    /usr/sbin/ModemManager    <noArgs>
root    822    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:21    [kworker/3:2H-kblockd]    <noArgs>
root    845    0.0    0.0    381488    7800    ?    Ssl    Jan08    0:00    23:55:21    /usr/sbin/lightdm    <noArgs>
root    849    0.0    0.2    1978808    20648    ?    Ssl    Jan08    0:20    23:55:21    /laforge.bin    <noArgs>
root    860    0.0    0.0    18320    4264    ?    S    Jan08    0:00    23:55:21    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    883    0.0    0.0    15652    2560    ?    S    Jan08    0:00    23:55:21    /usr/sbin/xrdp    <noArgs>
root    884    0.0    1.2    915128    104408    tty7    Ssl+    Jan08    0:02    23:55:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    886    0.0    0.0    8124    2588    tty1    Ss+    Jan08    0:00    23:55:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    907    0.0    0.1    169620    8284    ?    Sl    Jan08    0:00    23:55:20    lightdm    --session-child_17_20
lightdm    914    0.0    0.1    22868    13068    ?    Ss    Jan08    0:00    23:55:20    /usr/lib/systemd/systemd    --user
root    916    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:20    [psimon]    <noArgs>
lightdm    918    0.0    0.0    22712    3852    ?    S    Jan08    0:00    23:55:20    (sd-pam)    <noArgs>
lightdm    941    0.0    0.0    8348    4704    ?    Ss    Jan08    0:00    23:55:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    942    0.0    0.1    101208    10732    ?    S<sl    Jan08    0:00    23:55:20    /usr/bin/pipewire    <noArgs>
lightdm    943    0.0    1.2    666648    105592    ?    Ssl    Jan08    0:17    23:55:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    947    0.0    0.0    21492    3144    ?    SNsl    Jan08    0:00    23:55:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    949    0.0    0.1    479280    16000    ?    S<sl    Jan08    0:00    23:55:20    /usr/bin/wireplumber    <noArgs>
lightdm    950    0.0    0.0    84704    5228    ?    Ssl    Jan08    0:00    23:55:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    951    0.0    0.1    98776    8276    ?    S<sl    Jan08    0:00    23:55:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    975    0.0    0.0    381080    7284    ?    Ssl    Jan08    0:00    23:55:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    987    0.0    0.0    8208    4516    ?    S    Jan08    0:00    23:55:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    992    0.0    0.0    312816    8040    ?    Ssl    Jan08    0:00    23:55:20    /usr/libexec/gvfsd    <noArgs>
lightdm    1001    0.0    0.0    398408    7384    ?    Sl    Jan08    0:00    23:55:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1036    0.0    0.0    14372    5760    ?    S    Jan08    0:00    23:55:19    lightdm    --session-child_13_20
lightdm    1038    0.0    0.0    168772    7008    ?    Sl    Jan08    0:00    23:55:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1071    0.2    1.8    377776    151204    ?    Sl    Jan08    4:00    23:55:18    splunkd    -p_8089_start
root    1074    0.0    0.2    135648    18012    ?    Ss    Jan08    0:04    23:55:18    [splunkd    pid=1071]_splunkd_-p_8089_start_[process-runner]
root    1908    0.0    0.0    2688    1828    ?    S    Jan08    0:00    23:54:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1909    0.1    10.6    1414160    865028    ?    Sl    Jan08    2:14    23:54:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    7502    0.0    0.0    0    0    ?    I    Jan08    0:00    23:18:48    [kworker/u18:1-flush-254:0]    <noArgs>
root    54450    0.0    0.0    0    0    ?    I    Jan08    0:00    18:24:33    [kworker/u20:0-flush-254:0]    <noArgs>
root    88762    0.0    0.0    0    0    ?    I    Jan08    0:03    14:49:02    [kworker/3:0-events]    <noArgs>
root    93496    0.0    0.0    0    0    ?    I    Jan08    0:00    14:18:41    [kworker/u19:1-flush-254:0]    <noArgs>
root    159062    0.0    0.0    0    0    ?    I    02:35    0:00    07:25:36    [kworker/u20:2-flush-254:0]    <noArgs>
root    177524    0.0    0.0    0    0    ?    I    04:30    0:00    05:30:39    [kworker/u18:2-ext4-rsv-conversion]    <noArgs>
root    181129    0.0    0.0    0    0    ?    I    04:51    0:00    05:09:43    [kworker/u17:2-kvfree_rcu_reclaim]    <noArgs>
root    181376    0.0    0.0    0    0    ?    I    04:53    0:00    05:07:31    [kworker/u19:2-ext4-rsv-conversion]    <noArgs>
root    186104    0.0    0.0    0    0    ?    I    05:21    0:00    04:38:56    [kworker/u19:0-flush-254:0]    <noArgs>
root    190807    0.0    0.0    0    0    ?    I    05:51    0:00    04:08:57    [kworker/u17:1-flush-254:0]    <noArgs>
root    195711    0.0    0.0    0    0    ?    I    06:21    0:00    03:38:55    [kworker/u20:1]    <noArgs>
xrdp    228438    0.5    0.4    62044    38532    ?    S    09:49    0:03    10:55    /usr/sbin/xrdp    <noArgs>
root    228488    0.0    0.0    18320    4424    ?    S    09:50    0:00    10:29    /usr/sbin/xrdp-sesman    <noArgs>
pentester    228491    0.0    0.1    22904    13228    ?    Ss    09:50    0:00    10:29    /usr/lib/systemd/systemd    --user
pentester    228493    0.0    0.0    22592    3848    ?    S    09:50    0:00    10:29    (sd-pam)    <noArgs>
pentester    228513    0.0    0.0    8892    5648    ?    Ss    09:50    0:00    10:29    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
pentester    228514    0.0    0.0    97360    8032    ?    Ssl    09:50    0:00    10:29    /usr/bin/pipewire    <noArgs>
pentester    228515    0.0    1.2    630548    98088    ?    Sl    09:50    0:00    10:29    xfce4-session    <noArgs>
pentester    228516    0.3    1.8    400596    149472    ?    Sl    09:50    0:02    10:29    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    228519    0.0    0.0    7212    3516    ?    Ss    09:50    0:00    10:29    /usr/bin/mpris-proxy    <noArgs>
pentester    228520    0.0    0.1    399588    14176    ?    Ssl    09:50    0:00    10:29    /usr/bin/wireplumber    <noArgs>
pentester    228521    0.0    0.0    84704    5168    ?    Ssl    09:50    0:00    10:29    /usr/bin/pipewire    -c_filter-chain.conf
pentester    228522    0.0    0.1    99176    8772    ?    Ssl    09:50    0:00    10:29    /usr/bin/pipewire-pulse    <noArgs>
pentester    228545    0.0    0.0    95084    6164    ?    Sl    09:50    0:00    10:29    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    228622    0.0    0.0    10688    1856    ?    Ss    09:50    0:00    10:28    /usr/bin/ssh-agent    x-session-manager
pentester    228633    0.0    0.0    381172    7704    ?    Ssl    09:50    0:00    10:28    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    228640    0.0    0.0    8344    4896    ?    S    09:50    0:00    10:28    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    228650    0.0    0.0    168784    7712    ?    Sl    09:50    0:00    10:28    /usr/libexec/at-spi2-registryd    --use-gnome-session
pentester    228664    0.0    0.0    155488    3772    ?    SLsl    09:50    0:00    10:28    /usr/bin/gpg-agent    --supervised
pentester    228667    0.1    0.5    297312    48728    ?    Sl    09:50    0:01    10:28    xfwm4    <noArgs>
pentester    228672    0.0    0.0    312816    8040    ?    Ssl    09:50    0:00    10:28    /usr/libexec/gvfsd    <noArgs>
pentester    228678    0.0    0.0    398408    7508    ?    Sl    09:50    0:00    10:28    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    228687    0.0    0.3    348408    27140    ?    Sl    09:50    0:00    10:28    xfsettingsd    <noArgs>
pentester    228693    0.0    0.0    165276    5972    ?    Ssl    09:50    0:00    10:28    /usr/libexec/dconf-service    <noArgs>
pentester    228694    0.1    0.5    506312    43696    ?    Sl    09:50    0:00    10:28    xfce4-panel    <noArgs>
pentester    228703    0.0    0.3    420256    26316    ?    Sl    09:50    0:00    10:27    Thunar    --daemon
pentester    228716    0.0    0.8    663284    69392    ?    Sl    09:50    0:00    10:27    xfdesktop    <noArgs>
pentester    228721    0.0    0.5    429264    44360    ?    Sl    09:50    0:00    10:27    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_14680071_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    228726    0.0    0.0    7180    3256    ?    S    09:50    0:00    10:27    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    228731    0.0    0.2    405608    19396    ?    Sl    09:50    0:00    10:27    xfce4-power-manager    <noArgs>
pentester    228733    0.0    0.4    281552    35432    ?    Sl    09:50    0:00    10:27    xfce4-screensaver    <noArgs>
pentester    228739    0.0    0.4    606504    37828    ?    Sl    09:50    0:00    10:27    diodon    <noArgs>
pentester    228742    0.0    0.7    678200    61932    ?    Sl    09:50    0:00    10:27    /usr/bin/python3    /usr/bin/blueman-applet
pentester    228745    0.0    0.5    66232    41148    ?    S    09:50    0:00    10:27    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pentester    228748    0.0    0.0    12432    1904    ?    Ssl    09:50    0:00    10:27    xcape    -e_Super_L_Control_L_Escape
pentester    228753    0.0    0.2    265304    18556    ?    Sl    09:50    0:00    10:27    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    228759    0.0    0.2    481796    21612    ?    Ssl    09:50    0:00    10:27    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    228772    0.0    0.0    308560    6788    ?    Sl    09:50    0:00    10:27    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    228781    0.0    0.1    922480    8820    ?    Sl    09:50    0:00    10:27    xiccd    <noArgs>
pentester    228809    0.0    0.5    586932    43028    ?    Sl    09:50    0:00    10:27    nm-applet    <noArgs>
colord    228825    0.0    0.1    317072    15012    ?    Ssl    09:50    0:00    10:27    /usr/libexec/colord    <noArgs>
pentester    228842    0.0    0.0    95896    7604    ?    Sl    09:50    0:00    10:27    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
root    228860    0.0    0.1    318516    10224    ?    Ssl    09:50    0:00    10:27    /usr/libexec/upowerd    <noArgs>
pentester    228882    0.0    0.1    458424    9688    ?    Ssl    09:50    0:00    10:27    /usr/bin/zeitgeist-daemon    <noArgs>
pentester    228925    0.0    0.2    352628    20396    ?    Ssl    09:50    0:00    10:27    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    228934    0.2    0.7    310940    64040    ?    Sl    09:50    0:01    10:27    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_14680076_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    228936    0.0    0.4    499532    38076    ?    Sl    09:50    0:00    10:27    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_14680077_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    228938    0.2    0.3    272796    29024    ?    Sl    09:50    0:01    10:27    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_14680078_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    228939    0.0    0.4    359116    39084    ?    Sl    09:50    0:00    10:27    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_14680079_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    228940    0.0    0.4    425196    37208    ?    Sl    09:50    0:00    10:27    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_14680080_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    228943    0.0    0.4    286068    37484    ?    Sl    09:50    0:00    10:27    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_14680081_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    228956    0.0    0.4    425472    37628    ?    Sl    09:50    0:00    10:26    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_14680082_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    229030    0.0    0.1    538332    11828    ?    Ssl    09:50    0:00    10:26    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
root    229034    0.0    0.1    478372    14144    ?    Ssl    09:50    0:00    10:25    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    229046    0.0    0.0    307864    6764    ?    Ssl    09:50    0:00    10:25    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    229051    0.0    0.0    308884    7336    ?    Ssl    09:50    0:00    10:25    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    229056    0.0    0.0    307916    6736    ?    Ssl    09:50    0:00    10:25    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    229061    0.0    0.1    389944    8904    ?    Ssl    09:50    0:00    10:25    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    229075    0.0    0.0    168868    6660    ?    Ssl    09:50    0:00    10:25    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    229079    0.0    0.1    534256    9332    ?    Sl    09:50    0:00    10:25    /usr/libexec/gvfsd-trash    --spawner_:1.21_/org/gtk/gvfs/exec_spaw/0
pentester    229181    0.1    0.8    803900    67280    ?    Sl    09:50    0:00    10:18    /usr/bin/qterminal    <noArgs>
pentester    229183    0.0    0.2    557004    19880    ?    Ssl    09:50    0:00    10:18    /usr/libexec/xdg-desktop-portal    <noArgs>
pentester    229190    0.0    0.0    308740    6648    ?    Ssl    09:50    0:00    10:18    /usr/libexec/xdg-permission-store    <noArgs>
pentester    229198    0.0    0.0    539704    7168    ?    Ssl    09:50    0:00    10:18    /usr/libexec/xdg-document-portal    <noArgs>
root    229204    0.0    0.0    2592    2012    ?    Ss    09:50    0:00    10:18    fusermount3    -o_rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal_--_/run/user/1001/doc
pentester    229209    0.0    0.2    479576    19716    ?    Ssl    09:50    0:00    10:18    /usr/libexec/xdg-desktop-portal-gtk    <noArgs>
pentester    229217    0.1    0.0    10504    6468    pts/0    Ss    09:50    0:00    10:18    /usr/bin/zsh    <noArgs>
root    229734    0.0    0.0    0    0    ?    I    09:50    0:00    09:58    [kworker/u18:3-kvfree_rcu_reclaim]    <noArgs>
root    230341    0.0    0.0    0    0    ?    I    09:51    0:00    09:21    [kworker/3:1-ata_sff]    <noArgs>
root    231095    0.0    0.0    0    0    ?    I    09:52    0:00    08:02    [kworker/1:0-ata_sff]    <noArgs>
pentester    231610    0.5    0.5    53912    44064    pts/0    S+    09:53    0:02    07:13    /usr/lib/nmap/nmap    --privileged_-A_-p-_10.0.1.6
root    232192    0.0    0.0    0    0    ?    I    09:54    0:00    06:13    [kworker/2:0-ata_sff]    <noArgs>
root    232554    0.0    0.0    0    0    ?    I    09:55    0:00    05:37    [kworker/0:2-ata_sff]    <noArgs>
root    233656    0.0    0.0    0    0    ?    I    09:56    0:00    04:08    [kworker/3:2-ata_sff]    <noArgs>
pentester    234292    0.1    0.0    13668    7092    pts/1    Ss+    09:57    0:00    03:03    /usr/bin/zsh    <noArgs>
root    234396    0.0    0.0    0    0    ?    I    09:57    0:00    02:56    [kworker/1:1-ata_sff]    <noArgs>
root    234795    0.0    0.0    0    0    ?    I    09:58    0:00    02:16    [kworker/u17:0-ext4-rsv-conversion]    <noArgs>
root    235619    0.0    0.0    0    0    ?    I    09:59    0:00    00:55    [kworker/2:1-ata_sff]    <noArgs>
root    236024    0.0    0.0    0    0    ?    I    10:00    0:00    00:14    [kworker/0:0]    <noArgs>
pentester    236150    0.0    0.0    5588    1964    ?    S    10:00    0:00    00:07    sleep    10
root    236287    0.0    0.0    2688    1828    ?    S    10:00    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    236288    0.0    0.0    2688    1852    ?    S    10:00    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    236309    0.0    0.0    9504    4316    ?    R    10:00    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    236310    0.0    0.0    5592    1916    ?    S    10:00    0:00    00:00    tee    /dev/null
root    236311    0.0    0.0    9472    4020    ?    S    10:00    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}