_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.1    0.1    24820    9484    ?    Ss    Jan09    1:17    17:18:03    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:03    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:03    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:03    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:03    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:03    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:03    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:03    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:03    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan09    0:00    17:18:03    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:03    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan09    0:03    17:18:03    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan09    0:17    17:18:03    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:03    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:03    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:03    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:03    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:03    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:03    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:03    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:03    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan09    0:02    17:18:03    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:03    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:03    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:03    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:03    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan09    0:02    17:18:03    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:03    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:03    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:03    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:03    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan09    0:02    17:18:03    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:03    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:03    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:03    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan09    0:00    17:18:03    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan09    0:00    17:18:03    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan09    0:00    17:18:03    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:03    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:03    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:03    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:03    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan09    0:14    17:18:03    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan09    0:00    17:18:03    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan09    0:04    17:18:03    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:03    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:03    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:03    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:03    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:03    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:03    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:03    [kworker/R-devfreq_wq]    <noArgs>
root    69    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:03    [kworker/1:1H-kblockd]    <noArgs>
root    70    0.5    0.0    0    0    ?    S    Jan09    5:23    17:18:03    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:02    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:02    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:02    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:02    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I    Jan09    0:00    17:18:02    [kworker/u16:1-netns]    <noArgs>
root    90    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:02    [kworker/R-kstrp]    <noArgs>
root    96    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:02    [kworker/u21:0]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:02    [kworker/u22:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:02    [kworker/u23:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:02    [kworker/u24:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:02    [kworker/u25:0]    <noArgs>
root    171    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:02    [kworker/2:1H-kblockd]    <noArgs>
root    200    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:02    [kworker/0:1H-kblockd]    <noArgs>
root    231    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:01    [kworker/3:1H-kblockd]    <noArgs>
root    251    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:01    [kworker/R-ata_sff]    <noArgs>
root    258    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:01    [scsi_eh_0]    <noArgs>
root    259    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:01    [kworker/R-scsi_tmf_0]    <noArgs>
root    260    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:01    [scsi_eh_1]    <noArgs>
root    261    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:01    [kworker/R-scsi_tmf_1]    <noArgs>
root    301    0.0    0.0    0    0    ?    S    Jan09    0:06    17:18:01    [jbd2/vda1-8]    <noArgs>
root    302    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:18:01    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    326    0.0    0.0    0    0    ?    S    Jan09    0:00    17:18:00    [hwrng]    <noArgs>
root    381    0.0    0.4    96112    39188    ?    Ss    Jan09    0:15    17:17:59    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    410    0.0    0.0    90028    2532    ?    Ssl    Jan09    0:04    17:17:59    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    416    0.0    0.0    37324    3884    ?    Ss    Jan09    0:01    17:17:59    /usr/lib/systemd/systemd-udevd    <noArgs>
root    423    0.0    0.0    0    0    ?    S    Jan09    0:00    17:17:59    [psimon]    <noArgs>
root    553    0.0    0.0    8388    328    ?    Ss    Jan09    0:05    17:17:58    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    602    0.0    0.0    10528    468    ?    S    Jan09    0:03    17:17:58    dhcpcd:    eth0_[ip4]_[ip6]
root    603    0.0    0.0    10536    12    ?    S    Jan09    0:00    17:17:58    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    604    0.0    0.0    10516    4    ?    S    Jan09    0:00    17:17:58    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    605    0.0    0.0    10516    12    ?    S    Jan09    0:00    17:17:58    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    607    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:17:58    [kworker/R-rpciod]    <noArgs>
root    608    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:17:58    [kworker/R-xprtiod]    <noArgs>
root    613    0.0    0.0    0    0    ?    I<    Jan09    0:00    17:17:58    [kworker/R-cfg80211]    <noArgs>
dhcpcd    623    0.0    0.0    10536    4    ?    S    Jan09    0:00    17:17:57    dhcpcd:    [BPF_ARP]_eth0_10.0.254.206
dhcpcd    624    0.0    0.0    10536    4    ?    S    Jan09    0:00    17:17:57    dhcpcd:    [DHCP6_proxy]_fe80::501c:eee4:8a1b:d31c
dhcpcd    643    0.0    0.0    10536    8    ?    S    Jan09    0:00    17:17:51    dhcpcd:    [BOOTP_proxy]_10.0.254.206
root    736    0.0    0.0    309036    3680    ?    Ssl    Jan09    0:01    17:17:51    /usr/libexec/accounts-daemon    <noArgs>
root    738    0.0    0.0    6876    1208    ?    Ss    Jan09    0:02    17:17:51    /usr/sbin/cron    -f
messagebus    739    0.0    0.0    10108    3596    ?    Ss    Jan09    0:02    17:17:51    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    740    0.0    0.1    383408    8452    ?    Ssl    Jan09    0:10    17:17:51    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    743    0.0    0.0    80876    16    ?    Ssl    Jan09    0:00    17:17:51    /usr/sbin/qemu-ga    <noArgs>
root    746    0.0    0.0    18384    5524    ?    Ss    Jan09    0:05    17:17:51    /usr/lib/systemd/systemd-logind    <noArgs>
root    765    0.0    0.0    336432    5752    ?    Ssl    Jan09    0:00    17:17:51    /usr/sbin/NetworkManager    --no-daemon
root    799    0.0    0.0    391064    3244    ?    Ssl    Jan09    0:00    17:17:51    /usr/sbin/ModemManager    <noArgs>
root    819    0.0    0.0    381388    3368    ?    SLsl    Jan09    0:00    17:17:51    /usr/sbin/lightdm    <noArgs>
root    829    0.0    0.0    18320    2952    ?    S    Jan09    0:00    17:17:51    /usr/sbin/xrdp-sesman    <noArgs>
root    840    0.0    0.0    7180    12    ?    Ss    Jan09    0:00    17:17:50    /usr/bin/bash    -c_/usr/bin/bpftrace_/home/pentester/Stanford-university/logging/participant_env/verbose-log/bpf-scripts/tcp-tracker.bt_>>_/home/pentester/Stanford-university/logging/participant_env/verbose-log/network-logs/tcp-tracker.log_2>&1
root    841    0.0    0.0    7180    12    ?    Ss    Jan09    0:00    17:17:50    /usr/bin/bash    -c_/usr/bin/bpftrace_/home/pentester/Stanford-university/logging/participant_env/verbose-log/bpf-scripts/udp-tracker.bt_>>_/home/pentester/Stanford-university/logging/participant_env/verbose-log/network-logs/udp-tracker.log_2>&1
root    848    0.0    0.1    2347212    12336    ?    Ssl    Jan09    0:46    17:17:50    /laforge.bin    <noArgs>
root    855    0.0    0.0    391948    7988    ?    S    Jan09    0:45    17:17:50    /usr/bin/bpftrace    /home/pentester/Stanford-university/logging/participant_env/verbose-log/bpf-scripts/udp-tracker.bt
root    856    0.2    0.2    395376    17532    ?    S    Jan09    2:41    17:17:50    /usr/bin/bpftrace    /home/pentester/Stanford-university/logging/participant_env/verbose-log/bpf-scripts/tcp-tracker.bt
xrdp    871    0.0    0.0    15652    504    ?    S    Jan09    0:02    17:17:50    /usr/sbin/xrdp    <noArgs>
root    873    0.0    0.0    8124    20    tty1    Ss+    Jan09    0:00    17:17:50    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    874    0.0    0.2    915128    16384    tty7    Ssl+    Jan09    0:07    17:17:50    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    928    0.0    0.0    169616    12    ?    Sl    Jan09    0:00    17:17:50    lightdm    --session-child_17_20
lightdm    936    0.0    0.0    22568    5608    ?    Ss    Jan09    0:09    17:17:49    /usr/lib/systemd/systemd    --user
root    938    0.0    0.0    0    0    ?    S    Jan09    0:00    17:17:49    [psimon]    <noArgs>
lightdm    942    0.0    0.0    22712    8    ?    S    Jan09    0:00    17:17:49    (sd-pam)    <noArgs>
lightdm    969    0.0    0.0    8384    1760    ?    Ss    Jan09    0:00    17:17:49    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    971    0.1    0.2    666648    21444    ?    Ssl    Jan09    1:59    17:17:49    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    974    0.0    0.0    98776    108    ?    Ssl    Jan09    0:00    17:17:49    /usr/bin/pipewire-pulse    <noArgs>
rtkit    976    0.0    0.0    87028    1740    ?    SNsl    Jan09    0:02    17:17:49    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    998    0.0    0.0    381080    12    ?    Ssl    Jan09    0:00    17:17:49    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    1007    0.0    0.0    8208    16    ?    S    Jan09    0:00    17:17:49    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    1011    0.0    0.0    312816    12    ?    Ssl    Jan09    0:00    17:17:49    /usr/libexec/gvfsd    <noArgs>
lightdm    1020    0.0    0.0    398408    12    ?    Sl    Jan09    0:00    17:17:49    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1051    0.6    0.8    388016    72500    ?    Sl    Jan09    6:42    17:17:48    splunkd    -p_8089_start
root    1054    0.0    0.0    135648    1620    ?    Ss    Jan09    0:04    17:17:48    [splunkd    pid=1051]_splunkd_-p_8089_start_[process-runner]
root    1064    0.0    0.0    14808    3044    ?    S    Jan09    0:00    17:17:48    lightdm    --session-child_13_20
lightdm    1066    0.0    0.0    168772    12    ?    Sl    Jan09    0:00    17:17:48    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1931    0.0    0.0    2688    12    ?    S    Jan09    0:00    17:17:17    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1932    0.4    2.0    1479696    170164    ?    Sl    Jan09    4:23    17:17:17    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
pentester    2361    0.0    0.0    23032    7208    ?    Ss    Jan09    0:12    17:14:44    /usr/lib/systemd/systemd    --user
pentester    2363    0.0    0.0    22592    8    ?    S    Jan09    0:00    17:14:44    (sd-pam)    <noArgs>
pentester    2660    0.0    0.0    7180    1444    ?    S    Jan09    0:05    17:14:42    /bin/bash    /usr/local/bin/log_wintitles.sh
root    2661    0.0    0.0    318516    3584    ?    Ssl    Jan09    0:00    17:14:42    /usr/libexec/upowerd    <noArgs>
colord    2772    0.0    0.0    317052    6492    ?    Ssl    Jan09    0:00    17:14:42    /usr/libexec/colord    <noArgs>
root    2802    0.0    0.0    478376    5112    ?    Ssl    Jan09    0:06    17:14:42    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    3319    0.0    0.0    109248    20    ?    Sl    Jan09    0:00    17:14:24    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-134709-3311-pentester.log
pentester    3320    0.0    0.0    0    0    ?    Z    Jan09    0:00    17:14:24    [asciinema]    <defunct>
pentester    3321    0.0    0.0    0    0    ?    Z    Jan09    0:00    17:14:24    [asciinema]    <defunct>
pentester    3322    0.0    0.0    2688    12    pts/3    Ss    Jan09    0:00    17:14:24    sh    -c_/usr/bin/zsh
pentester    3323    0.0    0.0    10332    12    pts/3    S    Jan09    0:00    17:14:24    /usr/bin/zsh    <noArgs>
pentester    32370    0.0    0.0    109620    3780    ?    Sl    Jan09    0:15    16:40:53    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-142040-32354-pentester.log
pentester    32371    0.0    0.0    0    0    ?    Z    Jan09    0:00    16:40:52    [asciinema]    <defunct>
pentester    32372    0.0    0.0    0    0    ?    Z    Jan09    0:09    16:40:52    [asciinema]    <defunct>
pentester    32373    0.0    0.0    2688    12    pts/1    Ss    Jan09    0:00    16:40:52    sh    -c_/usr/bin/zsh
pentester    32374    0.0    0.0    13612    12    pts/1    S    Jan09    0:00    16:40:52    /usr/bin/zsh    <noArgs>
pentester    41608    0.0    0.0    109248    16    ?    Sl    Jan09    0:00    16:29:57    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-143136-41600-pentester.log
pentester    41609    0.0    0.0    0    0    ?    Z    Jan09    0:00    16:29:57    [asciinema]    <defunct>
pentester    41610    0.0    0.0    0    0    ?    Z    Jan09    0:00    16:29:57    [asciinema]    <defunct>
pentester    41611    0.0    0.0    2688    12    pts/11    Ss    Jan09    0:00    16:29:57    sh    -c_/usr/bin/zsh
pentester    41612    0.0    0.0    10332    12    pts/11    S+    Jan09    0:00    16:29:57    /usr/bin/zsh    <noArgs>
pentester    54253    0.0    0.0    109248    68    ?    Sl    Jan09    0:00    16:14:55    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-144637-54245-pentester.log
pentester    54254    0.0    0.0    0    0    ?    Z    Jan09    0:00    16:14:55    [asciinema]    <defunct>
pentester    54255    0.0    0.0    0    0    ?    Z    Jan09    0:00    16:14:55    [asciinema]    <defunct>
pentester    54256    0.0    0.0    2688    12    pts/13    Ss    Jan09    0:00    16:14:55    sh    -c_/usr/bin/zsh
pentester    54257    0.0    0.0    10432    12    pts/13    S    Jan09    0:00    16:14:55    /usr/bin/zsh    <noArgs>
pentester    63489    3.5    4.2    75586156    343228    pts/1    Sl+    Jan09    34:01    16:03:52    claude    <noArgs>
pentester    85443    0.0    0.0    109248    16    ?    Sl    Jan09    0:00    15:39:08    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-152225-85408-pentester.log
pentester    85444    0.0    0.0    0    0    ?    Z    Jan09    0:00    15:39:08    [asciinema]    <defunct>
pentester    85445    0.0    0.0    0    0    ?    Z    Jan09    0:00    15:39:08    [asciinema]    <defunct>
pentester    85446    0.0    0.0    2688    12    pts/6    Ss    Jan09    0:00    15:39:08    sh    -c_/usr/bin/zsh
pentester    85447    0.0    0.0    14072    12    pts/6    S+    Jan09    0:01    15:39:08    /usr/bin/zsh    <noArgs>
pentester    115351    0.0    0.0    109360    384    ?    Sl    Jan09    0:00    15:12:06    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-154927-115311-pentester.log
pentester    115352    0.0    0.0    0    0    ?    Z    Jan09    0:00    15:12:06    [asciinema]    <defunct>
pentester    115353    0.0    0.0    0    0    ?    Z    Jan09    0:00    15:12:06    [asciinema]    <defunct>
pentester    115354    0.0    0.0    2688    12    pts/8    Ss    Jan09    0:00    15:12:06    sh    -c_/usr/bin/zsh
pentester    115355    0.0    0.0    10340    12    pts/8    S    Jan09    0:00    15:12:06    /usr/bin/zsh    <noArgs>
pentester    115459    0.0    0.0    3320    12    pts/8    S+    Jan09    0:00    15:11:59    nc    -lnvp_4444
pentester    115966    0.0    0.0    109360    60    ?    Sl    Jan09    0:00    15:11:23    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-155009-115958-pentester.log
pentester    115967    0.0    0.0    0    0    ?    Z    Jan09    0:00    15:11:23    [asciinema]    <defunct>
pentester    115968    0.0    0.0    0    0    ?    Z    Jan09    0:00    15:11:23    [asciinema]    <defunct>
pentester    115969    0.0    0.0    2688    12    pts/16    Ss    Jan09    0:00    15:11:23    sh    -c_/usr/bin/zsh
pentester    115970    0.0    0.0    13624    12    pts/16    S    Jan09    0:00    15:11:23    /usr/bin/zsh    <noArgs>
pentester    116283    0.0    0.0    105956    5764    pts/16    S+    Jan09    0:07    15:11:01    python3    -m_http.server
pentester    119089    0.0    0.0    109628    16    ?    Sl    Jan09    0:00    15:07:24    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-155409-119077-pentester.log
pentester    119090    0.0    0.0    0    0    ?    Z    Jan09    0:00    15:07:24    [asciinema]    <defunct>
pentester    119091    0.0    0.0    0    0    ?    Z    Jan09    0:00    15:07:24    [asciinema]    <defunct>
pentester    119092    0.0    0.0    2688    12    pts/20    Ss    Jan09    0:00    15:07:24    sh    -c_/usr/bin/zsh
pentester    119093    0.0    0.0    10160    12    pts/20    S+    Jan09    0:00    15:07:24    /usr/bin/zsh    <noArgs>
pentester    120677    0.0    0.0    109360    16    ?    Sl    Jan09    0:00    15:05:30    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-155602-120665-pentester.log
pentester    120678    0.0    0.0    0    0    ?    Z    Jan09    0:00    15:05:30    [asciinema]    <defunct>
pentester    120679    0.0    0.0    0    0    ?    Z    Jan09    0:00    15:05:30    [asciinema]    <defunct>
pentester    120680    0.0    0.0    2688    12    pts/22    Ss    Jan09    0:00    15:05:30    sh    -c_/usr/bin/zsh
pentester    120681    0.0    0.0    10340    12    pts/22    S+    Jan09    0:00    15:05:30    /usr/bin/zsh    <noArgs>
pentester    132875    0.0    0.0    17168    436    ?    Ss    Jan09    0:00    14:50:24    tmux    <noArgs>
pentester    132876    0.0    0.0    10340    548    pts/23    Ss+    Jan09    0:00    14:50:24    -zsh    <noArgs>
pentester    139879    0.0    0.0    109360    1236    ?    Sl    Jan09    0:00    14:41:44    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-161949-139871-pentester.log
pentester    139880    0.0    0.0    0    0    ?    Z    Jan09    0:00    14:41:44    [asciinema]    <defunct>
pentester    139881    0.0    0.0    0    0    ?    Z    Jan09    0:00    14:41:44    [asciinema]    <defunct>
pentester    139882    0.0    0.0    2688    12    pts/27    Ss    Jan09    0:00    14:41:43    sh    -c_/usr/bin/zsh
pentester    139883    0.0    0.0    10340    816    pts/27    S+    Jan09    0:00    14:41:43    /usr/bin/zsh    <noArgs>
pentester    141319    0.0    0.0    109360    160    ?    Sl    Jan09    0:00    14:39:55    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-162137-141307-pentester.log
pentester    141328    0.0    0.0    0    0    ?    Z    Jan09    0:00    14:39:55    [asciinema]    <defunct>
pentester    141329    0.0    0.0    0    0    ?    Z    Jan09    0:00    14:39:55    [asciinema]    <defunct>
pentester    141330    0.0    0.0    2688    12    pts/29    Ss    Jan09    0:00    14:39:55    sh    -c_/usr/bin/zsh
pentester    141331    0.0    0.0    10336    16    pts/29    S    Jan09    0:00    14:39:55    /usr/bin/zsh    <noArgs>
pentester    142920    0.0    0.0    109360    16    ?    Sl    Jan09    0:00    14:37:53    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-162339-142908-pentester.log
pentester    142921    0.0    0.0    0    0    ?    Z    Jan09    0:00    14:37:53    [asciinema]    <defunct>
pentester    142922    0.0    0.0    0    0    ?    Z    Jan09    0:00    14:37:53    [asciinema]    <defunct>
pentester    142923    0.0    0.0    2688    12    pts/31    Ss    Jan09    0:00    14:37:53    sh    -c_/usr/bin/zsh
pentester    142924    0.0    0.0    10336    12    pts/31    S+    Jan09    0:00    14:37:53    /usr/bin/zsh    <noArgs>
root    666762    0.0    0.0    19964    16    pts/3    S+    09:06    0:00    02:32:21    sudo    su
pentester    673350    0.0    0.0    3320    12    pts/13    S+    09:14    0:00    02:23:37    netcat    10.0.1.10_6768
pentester    673473    0.0    0.0    3320    12    pts/29    S+    09:15    0:00    02:23:26    nc    -lnvp_5555
root    696099    0.0    0.0    0    0    ?    I    09:40    0:00    01:58:21    [kworker/u19:4-flush-254:0]    <noArgs>
pentester    716337    0.0    0.0    109360    5624    ?    Sl    09:59    0:00    01:38:55    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-095932-716321-pentester.log
pentester    716338    0.0    0.0    0    0    ?    Z    09:59    0:00    01:38:55    [asciinema]    <defunct>
pentester    716339    0.0    0.0    0    0    ?    Z    09:59    0:00    01:38:55    [asciinema]    <defunct>
pentester    716340    0.0    0.0    2688    52    pts/33    Ss    09:59    0:00    01:38:55    sh    -c_/usr/bin/zsh
pentester    716341    0.0    0.0    10340    848    pts/33    S    09:59    0:00    01:38:55    /usr/bin/zsh    <noArgs>
pentester    716433    0.0    0.0    25140    1380    pts/33    S+    09:59    0:00    01:38:49    mysql    -u_devuser_-h_10.0.1.99_-p_--skip-ssl
root    721687    0.0    0.0    0    0    ?    I    10:03    0:00    01:35:16    [kworker/u19:6-events_unbound]    <noArgs>
pentester    731670    0.0    0.0    109360    6164    ?    Sl    10:10    0:00    01:27:31    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-101057-731658-pentester.log
pentester    731704    0.0    0.0    0    0    ?    Z    10:10    0:00    01:27:30    [asciinema]    <defunct>
pentester    731705    0.0    0.0    0    0    ?    Z    10:10    0:00    01:27:30    [asciinema]    <defunct>
pentester    731706    0.0    0.0    2688    20    pts/43    Ss    10:10    0:00    01:27:30    sh    -c_/usr/bin/zsh
pentester    731707    0.0    0.0    13640    704    pts/43    S+    10:10    0:00    01:27:30    /usr/bin/zsh    <noArgs>
root    736989    0.0    0.0    0    0    ?    I    10:17    0:00    01:20:28    [kworker/u20:1-flush-254:0]    <noArgs>
pentester    745765    0.0    0.0    10456    1304    pts/44    Ss+    10:28    0:00    01:10:10    -zsh    <noArgs>
root    774117    0.0    0.0    0    0    ?    I    10:50    0:00    48:01    [kworker/u20:3-flush-254:0]    <noArgs>
root    782194    0.0    0.0    0    0    ?    I    10:54    0:00    44:08    [kworker/u18:3-ext4-rsv-conversion]    <noArgs>
xrdp    783352    19.7    0.5    93896    46972    ?    R    10:58    7:57    40:16    /usr/sbin/xrdp    <noArgs>
lightdm    783381    0.0    0.1    99836    8192    ?    Ssl    10:59    0:00    39:15    /usr/bin/pipewire    <noArgs>
lightdm    783382    0.0    0.1    479240    12500    ?    Ssl    10:59    0:00    39:15    /usr/bin/wireplumber    <noArgs>
lightdm    783383    0.0    0.0    84704    3284    ?    Ssl    10:59    0:00    39:15    /usr/bin/pipewire    -c_filter-chain.conf
pentester    783393    0.0    0.0    98880    7728    ?    Ssl    10:59    0:00    39:14    /usr/bin/pipewire    <noArgs>
pentester    783394    0.0    0.1    399660    12412    ?    Ssl    10:59    0:00    39:14    /usr/bin/wireplumber    <noArgs>
pentester    783396    0.0    0.0    84704    3912    ?    Ssl    10:59    0:00    39:14    /usr/bin/pipewire    -c_filter-chain.conf
pentester    783397    0.0    0.1    171728    10884    ?    SLsl    10:59    0:00    39:14    /usr/bin/pipewire-pulse    <noArgs>
root    783418    0.0    0.0    0    0    ?    I    10:59    0:00    39:14    [kworker/1:0-events]    <noArgs>
pentester    783422    0.0    0.0    8932    4348    ?    Ss    10:59    0:00    39:14    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
root    783448    0.0    0.0    0    0    ?    I    10:59    0:00    39:13    [kworker/u19:1-flush-254:0]    <noArgs>
root    783554    0.0    0.0    0    0    ?    I    10:59    0:00    39:13    [kworker/u17:0-ext4-rsv-conversion]    <noArgs>
pentester    783913    0.0    0.1    20368    13464    ?    Ss    10:59    0:00    38:56    python3    /home/pentester/Stanford-university/logging/participant_env/screen-record/screen-record.py
root    783920    0.0    0.0    18320    3600    ?    S    10:59    0:00    38:55    /usr/sbin/xrdp-sesman    <noArgs>
pentester    783921    0.0    1.1    630548    94028    ?    Sl    10:59    0:00    38:54    xfce4-session    <noArgs>
pentester    783922    13.4    2.9    555404    242128    ?    Sl    10:59    5:14    38:54    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    783925    0.0    0.1    96500    9388    ?    Sl    10:59    0:00    38:54    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    784012    0.0    0.0    10688    3536    ?    Ss    10:59    0:00    38:54    /usr/bin/ssh-agent    x-session-manager
pentester    784042    0.0    0.0    381176    7404    ?    Ssl    10:59    0:00    38:54    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    784049    0.0    0.0    8344    4556    ?    S    10:59    0:00    38:54    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    784060    0.0    0.0    168784    7252    ?    Sl    10:59    0:00    38:54    /usr/libexec/at-spi2-registryd    --use-gnome-session
pentester    784071    0.0    0.0    155488    3696    ?    SLsl    10:59    0:00    38:53    /usr/bin/gpg-agent    --supervised
pentester    784074    1.3    1.5    1185120    128276    ?    Sl    10:59    0:31    38:53    xfwm4    <noArgs>
pentester    784079    0.0    0.0    312816    7768    ?    Ssl    10:59    0:00    38:53    /usr/libexec/gvfsd    <noArgs>
pentester    784085    0.0    0.0    398408    7216    ?    Sl    10:59    0:00    38:53    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    784103    0.0    0.3    351028    29296    ?    Sl    10:59    0:00    38:53    xfsettingsd    <noArgs>
pentester    784109    0.0    0.0    165276    5688    ?    Ssl    10:59    0:00    38:53    /usr/libexec/dconf-service    <noArgs>
pentester    784113    0.1    0.6    515832    50652    ?    Sl    10:59    0:02    38:53    xfce4-panel    <noArgs>
pentester    784119    0.0    0.3    485784    25108    ?    Sl    10:59    0:00    38:53    Thunar    --daemon
pentester    784126    0.0    1.1    744668    91296    ?    Sl    10:59    0:02    38:53    xfdesktop    <noArgs>
pentester    784131    0.0    0.5    428300    40836    ?    Sl    10:59    0:00    38:53    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_16777223_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    784136    0.7    0.7    310940    62176    ?    Sl    10:59    0:16    38:52    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_16777228_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    784137    0.0    0.4    425796    36624    ?    Sl    10:59    0:00    38:52    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_16777229_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    784138    0.2    0.3    272796    27676    ?    Sl    10:59    0:05    38:52    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_16777230_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    784140    0.0    0.4    359160    37596    ?    Sl    10:59    0:00    38:52    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_16777231_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    784141    0.0    0.4    425196    36260    ?    Sl    10:59    0:00    38:52    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_16777232_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    784144    0.0    0.4    286396    36728    ?    Sl    10:59    0:00    38:52    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_16777233_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    784154    0.0    0.4    425424    35652    ?    Sl    10:59    0:00    38:52    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_16777234_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    784178    0.0    0.0    7180    3408    ?    S    10:59    0:00    38:52    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    784187    0.0    0.2    405608    18664    ?    Sl    10:59    0:00    38:52    xfce4-power-manager    <noArgs>
pentester    784188    0.0    0.4    281548    34480    ?    Sl    10:59    0:00    38:52    xfce4-screensaver    <noArgs>
pentester    784194    0.0    0.3    732728    29136    ?    Sl    10:59    0:00    38:52    diodon    <noArgs>
pentester    784201    0.0    0.0    12432    2140    ?    Ssl    10:59    0:00    38:52    xcape    -e_Super_L_Control_L_Escape
pentester    784205    0.0    0.4    434476    38204    ?    Ssl    10:59    0:00    38:52    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    784207    0.0    0.7    603956    59704    ?    Sl    10:59    0:00    38:52    /usr/bin/python3    /usr/bin/blueman-applet
pentester    784208    0.0    0.4    66228    40252    ?    S    10:59    0:00    38:52    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pentester    784219    0.0    0.2    265304    17608    ?    Sl    10:59    0:00    38:52    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    784241    0.0    0.0    308560    6660    ?    Sl    10:59    0:00    38:52    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    784244    0.0    0.1    922616    8776    ?    Sl    10:59    0:00    38:52    xiccd    <noArgs>
pentester    784273    0.0    0.5    586928    41524    ?    Sl    10:59    0:00    38:52    nm-applet    <noArgs>
pentester    784315    0.0    0.1    392772    9428    ?    Ssl    10:59    0:00    38:52    /usr/bin/zeitgeist-daemon    <noArgs>
pentester    784321    0.0    0.1    96680    8404    ?    Sl    10:59    0:00    38:52    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
pentester    784326    0.0    0.1    538332    11404    ?    Ssl    10:59    0:00    38:52    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
pentester    784340    0.0    0.2    352916    20388    ?    Ssl    10:59    0:00    38:52    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    784350    0.0    0.0    307864    6348    ?    Ssl    10:59    0:00    38:52    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    784362    0.0    0.0    308884    6884    ?    Ssl    10:59    0:00    38:51    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    784372    0.0    0.0    307916    6768    ?    Ssl    10:59    0:00    38:51    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    784378    0.0    0.1    389944    8692    ?    Ssl    10:59    0:00    38:51    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    784404    0.0    0.0    168868    6556    ?    Ssl    10:59    0:00    38:51    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    784426    0.0    0.1    534256    8848    ?    Sl    10:59    0:00    38:51    /usr/libexec/gvfsd-trash    --spawner_:1.20_/org/gtk/gvfs/exec_spaw/0
pentester    784546    0.3    0.7    799128    61264    ?    Sl    10:59    0:07    38:44    /usr/bin/qterminal    <noArgs>
pentester    784556    0.0    0.2    557004    19532    ?    Ssl    10:59    0:00    38:44    /usr/libexec/xdg-desktop-portal    <noArgs>
pentester    784563    0.0    0.0    308740    6444    ?    Ssl    10:59    0:00    38:44    /usr/libexec/xdg-permission-store    <noArgs>
pentester    784571    0.0    0.0    539704    6884    ?    Ssl    10:59    0:00    38:44    /usr/libexec/xdg-document-portal    <noArgs>
root    784577    0.0    0.0    2592    1996    ?    Ss    10:59    0:00    38:44    fusermount3    -o_rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal_--_/run/user/1001/doc
pentester    784581    0.0    0.2    479576    18964    ?    Ssl    10:59    0:00    38:44    /usr/libexec/xdg-desktop-portal-gtk    <noArgs>
pentester    784588    0.0    0.0    10044    5808    pts/4    Ss    10:59    0:00    38:44    /usr/bin/zsh    <noArgs>
pentester    784604    0.0    0.3    109364    24500    pts/4    Sl+    10:59    0:00    38:44    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-105944-784588-pentester.log
pentester    784605    0.0    0.2    35600    16836    pts/4    S+    10:59    0:00    38:44    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-105944-784588-pentester.log
pentester    784606    0.0    0.2    35880    17884    pts/4    S+    10:59    0:00    38:44    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-105944-784588-pentester.log
pentester    784607    0.0    0.0    2688    1692    pts/14    Ss    10:59    0:00    38:44    sh    -c_/usr/bin/zsh
pentester    784608    0.0    0.0    10336    6304    pts/14    S    10:59    0:00    38:44    /usr/bin/zsh    <noArgs>
pentester    784646    21.2    8.9    12204576    731460    ?    Sl    10:59    8:12    38:41    /usr/lib/firefox-esr/firefox-esr    <noArgs>
pentester    784651    0.0    0.0    20868    2988    ?    Sl    10:59    0:00    38:41    /usr/lib/firefox-esr/crashhelper    784646_9_/tmp/_11
pentester    784746    0.0    0.5    236332    46896    ?    Sl    10:59    0:00    38:40    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:34528_-prefMapHandle_1:271610_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{050d0871-a1e8-48b1-9816-86cdc468e25b}_-parentPid_784646_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_1_socket
pentester    784768    0.1    1.6    2508616    130856    ?    Sl    10:59    0:04    38:39    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:34718_-prefMapHandle_1:271610_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{6bd31b50-cb3e-465d-964a-9d6e3b3f968c}_-parentPid_784646_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_2_tab
pentester    784775    0.0    0.6    405668    52476    ?    Sl    10:59    0:00    38:39    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:34718_-prefMapHandle_1:271610_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{01f7f492-8edb-4096-923c-818c53b6cdc4}_-parentPid_784646_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_3_rdd
pentester    784845    0.0    1.2    2469100    103328    ?    Sl    10:59    0:01    38:38    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:43117_-prefMapHandle_1:271610_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{9ed495f9-8095-42aa-8109-2adda31b6951}_-parentPid_784646_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_4_tab
pentester    784899    0.0    0.6    375432    55004    ?    Sl    10:59    0:00    38:37    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-sandboxingKind_0_-prefsHandle_0:43264_-prefMapHandle_1:271610_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{fe73752f-8456-425d-a975-9332e039964a}_-parentPid_784646_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_5_utility
pentester    786319    1.9    5.3    74663884    435620    pts/14    Sl+    11:00    0:44    37:43    claude    <noArgs>
pentester    786370    0.0    0.0    10044    5872    pts/15    Ss    11:00    0:00    37:42    /usr/bin/zsh    <noArgs>
pentester    786385    0.0    0.3    109364    24780    pts/15    Sl+    11:00    0:00    37:42    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-110046-786370-pentester.log
pentester    786410    0.0    0.2    35600    17080    pts/15    S+    11:00    0:00    37:42    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-110046-786370-pentester.log
pentester    786411    0.0    0.2    35612    17776    pts/15    S+    11:00    0:00    37:42    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-110046-786370-pentester.log
pentester    786415    0.0    0.0    2688    1800    pts/17    Ss    11:00    0:00    37:42    sh    -c_/usr/bin/zsh
pentester    786417    0.0    0.0    13656    7332    pts/17    S+    11:00    0:01    37:42    /usr/bin/zsh    <noArgs>
pentester    789928    0.0    0.1    118476    9000    ?    Ssl    11:03    0:00    34:28    /usr/bin/speech-dispatcher    -s_-t_0
pentester    789979    0.0    0.0    0    0    ?    Z    11:03    0:00    34:28    [sd_espeak-ng-mb]    <defunct>
pentester    789997    0.0    0.1    24216    9060    ?    S    11:03    0:00    34:28    /usr/lib/speech-dispatcher-modules/sd_espeak-ng    /etc/speech-dispatcher/modules/espeak-ng.conf
pentester    790007    0.0    0.0    163608    5608    ?    Sl    11:04    0:00    34:28    /usr/lib/speech-dispatcher-modules/sd_dummy    /etc/speech-dispatcher/modules/dummy.conf
pentester    790010    0.0    0.1    24412    9072    ?    S    11:04    0:00    34:28    /usr/lib/speech-dispatcher-modules/sd_espeak-ng    /etc/speech-dispatcher/modules/
root    791001    0.0    0.0    0    0    ?    I    11:05    0:00    33:20    [kworker/3:0-events]    <noArgs>
root    792203    0.0    0.0    0    0    ?    I    11:06    0:00    32:00    [kworker/u17:1-kvfree_rcu_reclaim]    <noArgs>
pentester    794099    0.0    0.0    10044    5944    pts/18    Ss    11:08    0:00    29:38    /usr/bin/zsh    <noArgs>
pentester    794111    0.0    0.3    109364    24896    pts/18    Sl+    11:08    0:00    29:38    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-110850-794099-pentester.log
pentester    794120    0.0    0.2    35600    17112    pts/18    S+    11:08    0:00    29:38    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-110850-794099-pentester.log
pentester    794121    0.0    0.2    35876    18028    pts/18    S+    11:08    0:00    29:38    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-110850-794099-pentester.log
pentester    794122    0.0    0.0    2688    1760    pts/24    Ss    11:08    0:00    29:38    sh    -c_/usr/bin/zsh
pentester    794123    0.0    0.0    10336    6264    pts/24    S    11:08    0:00    29:38    /usr/bin/zsh    <noArgs>
pentester    794146    2.9    5.3    74754004    438696    pts/24    Sl+    11:08    0:52    29:36    claude    <noArgs>
pentester    794423    0.0    0.0    10044    5792    pts/25    Ss    11:09    0:00    29:24    /usr/bin/zsh    <noArgs>
pentester    794431    0.0    0.3    109364    25164    pts/25    Sl+    11:09    0:00    29:24    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-110904-794423-pentester.log
pentester    794440    0.0    0.2    35600    17108    pts/25    S+    11:09    0:00    29:24    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-110904-794423-pentester.log
pentester    794441    0.0    0.2    35756    17960    pts/25    S+    11:09    0:00    29:24    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-110904-794423-pentester.log
pentester    794442    0.0    0.0    2688    1796    pts/35    Ss    11:09    0:00    29:24    sh    -c_/usr/bin/zsh
pentester    794443    0.0    0.0    13856    7672    pts/35    S+    11:09    0:01    29:24    /usr/bin/zsh    <noArgs>
root    796028    0.0    0.0    0    0    ?    I    11:11    0:00    27:20    [kworker/u18:1-ext4-rsv-conversion]    <noArgs>
root    797331    0.0    0.0    0    0    ?    I    11:12    0:00    25:30    [kworker/0:0-events]    <noArgs>
pentester    799163    1.3    2.3    2601004    191144    ?    Sl    11:15    0:18    23:19    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:40607_-prefMapHandle_1:271610_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{10ce6264-4b36-4c25-85e7-95c3c1f61d6f}_-parentPid_784646_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_68_tab
root    804351    0.0    0.0    0    0    ?    I    11:21    0:00    17:04    [kworker/u18:0-flush-254:0]    <noArgs>
root    805437    0.0    0.0    0    0    ?    I    11:22    0:00    15:40    [kworker/2:0-ata_sff]    <noArgs>
root    809086    0.0    0.0    0    0    ?    I    11:27    0:00    10:55    [kworker/u17:2-flush-254:0]    <noArgs>
root    810336    0.0    0.0    0    0    ?    I    11:29    0:00    09:21    [kworker/2:2-events]    <noArgs>
root    810451    0.0    0.0    0    0    ?    I    11:29    0:00    09:13    [kworker/0:1-ata_sff]    <noArgs>
root    810558    0.0    0.0    0    0    ?    I    11:29    0:00    09:03    [kworker/1:2-ata_sff]    <noArgs>
root    811291    0.0    0.0    0    0    ?    I    11:30    0:00    08:04    [kworker/3:1-ata_sff]    <noArgs>
pentester    813195    0.0    1.0    2437984    81608    ?    Sl    11:32    0:00    05:36    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:40855_-prefMapHandle_1:271610_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{9a232290-8b4d-49ae-928e-f060d2b5adfb}_-parentPid_784646_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_78_tab
pentester    814218    0.0    1.0    2438000    81604    ?    Sl    11:34    0:00    04:23    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:40855_-prefMapHandle_1:271610_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{fa1bd1a9-3b9b-48bc-be50-cab82c0a8f5b}_-parentPid_784646_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_79_tab
root    814420    0.0    0.0    0    0    ?    I    11:34    0:00    04:06    [kworker/0:2-ata_sff]    <noArgs>
root    814798    0.0    0.0    0    0    ?    I    11:34    0:00    03:34    [kworker/2:1-ata_sff]    <noArgs>
root    815181    0.0    0.0    0    0    ?    I    11:35    0:00    03:02    [kworker/3:2-ata_sff]    <noArgs>
root    816453    0.0    0.0    0    0    ?    I    11:36    0:00    01:42    [kworker/u20:0]    <noArgs>
root    816467    0.0    0.0    0    0    ?    I    11:36    0:00    01:41    [kworker/1:1-ata_sff]    <noArgs>
pentester    816802    0.1    1.0    2438000    81608    ?    Sl    11:37    0:00    01:16    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:40855_-prefMapHandle_1:271610_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{b4b856a5-334f-4778-a86e-c26f6c236a0e}_-parentPid_784646_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_80_tab
pentester    817198    100    4.7    1149512    386208    ?    Sl    11:37    0:48    00:47    ffmpeg    -video_size_2560x1600_-framerate_30_-f_x11grab_-i_:10.0_-preset_ultrafast_-movflags_+faststart_-t_60_/home/pentester/Stanford-university/logging/participant_env/screen-record/logs/in_progress/screen_recording_2026-01-10_11-37-40.mp4
pentester    817640    0.0    0.0    5588    2164    ?    S    11:38    0:00    00:09    sleep    10
pentester    817644    0.0    0.0    5588    2112    ?    S    11:38    0:00    00:09    sleep    10
root    817742    0.0    0.0    2688    1744    ?    S    11:38    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    817743    0.0    0.0    2688    1836    ?    S    11:38    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    817764    0.0    0.0    9900    4708    ?    R    11:38    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    817765    0.0    0.0    5592    2000    ?    S    11:38    0:00    00:00    tee    /dev/null
root    817766    0.0    0.0    9472    4052    ?    S    11:38    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}

_sourcetype: ps

source: ps

sourcetype: ps