_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24676    14968    ?    Ss    Jan08    0:02    23:50:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:50:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:33    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:33    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:33    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:03    23:50:33    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:33    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:33    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [irq/9-acpi]    <noArgs>
root    64    0.0    0.0    0    0    ?    I    Jan08    0:05    23:50:33    [kworker/2:1-events]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:05    23:50:33    [kworker/3:1-events]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-devfreq_wq]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/2:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:32    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    90    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-kstrp]    <noArgs>
root    96    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/u21:0]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/u22:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/u23:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/u24:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/u25:0]    <noArgs>
root    200    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/1:1H-kblockd]    <noArgs>
root    205    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/3:1H-kblockd]    <noArgs>
root    217    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/0:1H-kblockd]    <noArgs>
root    241    0.0    0.0    0    0    ?    I    Jan08    0:05    23:50:31    [kworker/0:2-events]    <noArgs>
root    249    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-ata_sff]    <noArgs>
root    253    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [scsi_eh_0]    <noArgs>
root    255    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-scsi_tmf_0]    <noArgs>
root    256    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [scsi_eh_1]    <noArgs>
root    257    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-scsi_tmf_1]    <noArgs>
root    268    0.0    0.0    0    0    ?    I    Jan08    0:06    23:50:31    [kworker/1:2-events]    <noArgs>
root    301    0.0    0.0    0    0    ?    S    Jan08    0:02    23:50:30    [jbd2/vda1-8]    <noArgs>
root    302    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:30    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    327    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:30    [hwrng]    <noArgs>
root    382    0.0    0.3    58552    24856    ?    Ss    Jan08    0:00    23:50:29    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    412    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:50:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    418    0.0    0.1    37588    12312    ?    Ss    Jan08    0:00    23:50:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    426    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:29    [psimon]    <noArgs>
root    559    0.0    0.0    8388    6824    ?    Ss    Jan08    0:02    23:50:28    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    604    0.0    0.0    10536    4528    ?    S    Jan08    0:00    23:50:28    dhcpcd:    eth0_[ip4]_[ip6]
root    605    0.0    0.0    10540    2508    ?    S    Jan08    0:00    23:50:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    606    0.0    0.0    10516    2080    ?    S    Jan08    0:00    23:50:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    607    0.0    0.0    10516    2144    ?    S    Jan08    0:00    23:50:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    609    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:28    [kworker/R-rpciod]    <noArgs>
root    610    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:28    [kworker/R-xprtiod]    <noArgs>
root    615    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    625    0.0    0.0    10540    2220    ?    S    Jan08    0:00    23:50:27    dhcpcd:    [BPF_ARP]_eth0_10.0.254.204
dhcpcd    626    0.0    0.0    10540    2348    ?    S    Jan08    0:00    23:50:26    dhcpcd:    [DHCP6_proxy]_fe80::d94b:f42b:6277:b243
dhcpcd    645    0.0    0.0    10540    2348    ?    S    Jan08    0:00    23:50:22    dhcpcd:    [BOOTP_proxy]_10.0.254.204
root    738    0.0    0.0    309036    7260    ?    Ssl    Jan08    0:00    23:50:22    /usr/libexec/accounts-daemon    <noArgs>
root    740    0.0    0.0    6876    2668    ?    Ss    Jan08    0:00    23:50:22    /usr/sbin/cron    -f
messagebus    741    0.0    0.0    10124    6548    ?    Ss    Jan08    0:00    23:50:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    743    0.0    0.1    382480    10056    ?    Ssl    Jan08    0:02    23:50:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    745    0.0    0.0    80876    3956    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/qemu-ga    <noArgs>
root    748    0.0    0.1    18336    9152    ?    Ss    Jan08    0:00    23:50:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    770    0.0    0.2    336460    18988    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/NetworkManager    --no-daemon
root    808    0.0    0.1    391052    12504    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/ModemManager    <noArgs>
root    834    0.0    0.0    381356    7692    ?    Ssl    Jan08    0:00    23:50:21    /usr/sbin/lightdm    <noArgs>
root    845    0.0    0.2    1904820    20688    ?    Ssl    Jan08    0:21    23:50:21    /laforge.bin    <noArgs>
root    850    0.0    0.0    18320    4288    ?    S    Jan08    0:00    23:50:21    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    870    0.0    0.0    15652    2352    ?    S    Jan08    0:00    23:50:21    /usr/sbin/xrdp    <noArgs>
root    877    0.0    1.2    915132    104392    tty7    Ssl+    Jan08    0:02    23:50:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    878    0.0    0.0    8124    2636    tty1    Ss+    Jan08    0:00    23:50:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    905    0.0    0.0    169620    8124    ?    Sl    Jan08    0:00    23:50:20    lightdm    --session-child_17_20
root    916    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:20    [psimon]    <noArgs>
lightdm    918    0.0    0.1    22808    13232    ?    Ss    Jan08    0:00    23:50:20    /usr/lib/systemd/systemd    --user
lightdm    922    0.0    0.0    22712    3864    ?    S    Jan08    0:00    23:50:20    (sd-pam)    <noArgs>
lightdm    957    0.0    0.0    8348    4700    ?    Ss    Jan08    0:00    23:50:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    958    0.0    0.1    101224    10700    ?    S<sl    Jan08    0:00    23:50:20    /usr/bin/pipewire    <noArgs>
lightdm    959    0.0    1.2    666648    105260    ?    Ssl    Jan08    0:17    23:50:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    961    0.0    0.1    479284    16072    ?    S<sl    Jan08    0:00    23:50:19    /usr/bin/wireplumber    <noArgs>
lightdm    962    0.0    0.0    84704    5184    ?    Ssl    Jan08    0:00    23:50:19    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    963    0.0    0.0    98776    8100    ?    S<sl    Jan08    0:00    23:50:19    /usr/bin/pipewire-pulse    <noArgs>
rtkit    964    0.0    0.0    21492    3204    ?    SNsl    Jan08    0:00    23:50:19    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    985    0.0    0.0    381080    7328    ?    Ssl    Jan08    0:00    23:50:19    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    995    0.0    0.0    8208    4440    ?    S    Jan08    0:00    23:50:19    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    1001    0.0    0.1    312816    8152    ?    Ssl    Jan08    0:00    23:50:19    /usr/libexec/gvfsd    <noArgs>
lightdm    1007    0.0    0.0    398408    7420    ?    Sl    Jan08    0:00    23:50:19    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1036    0.0    0.0    14372    5716    ?    S    Jan08    0:00    23:50:19    lightdm    --session-child_13_20
lightdm    1038    0.0    0.0    168772    7048    ?    Sl    Jan08    0:00    23:50:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1059    0.2    1.8    381872    149464    ?    Sl    Jan08    4:14    23:50:18    splunkd    -p_8089_start
root    1062    0.0    0.2    135648    18020    ?    Ss    Jan08    0:04    23:50:18    [splunkd    pid=1059]_splunkd_-p_8089_start_[process-runner]
root    1896    0.0    0.0    2688    1752    ?    S    Jan08    0:00    23:49:45    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1897    0.1    10.5    1414160    861552    ?    Sl    Jan08    2:22    23:49:45    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    6911    0.0    0.0    0    0    ?    I    Jan08    0:00    23:17:16    [kworker/u18:1-flush-254:0]    <noArgs>
root    27516    0.0    0.0    0    0    ?    I    Jan08    0:00    21:06:37    [kworker/u18:2-kvfree_rcu_reclaim]    <noArgs>
root    160494    0.0    0.0    0    0    ?    I    02:38    0:00    07:13:30    [kworker/u19:0-flush-254:0]    <noArgs>
root    178912    0.0    0.0    0    0    ?    I    04:32    0:00    05:18:56    [kworker/u20:2-kvfree_rcu_reclaim]    <noArgs>
root    186795    0.0    0.0    0    0    ?    I    05:22    0:00    04:29:11    [kworker/u19:1-ext4-rsv-conversion]    <noArgs>
root    187654    0.0    0.0    0    0    ?    I    05:29    0:00    04:22:06    [kworker/u19:2-flush-254:0]    <noArgs>
root    199052    0.0    0.0    0    0    ?    I    06:40    0:00    03:11:18    [kworker/u18:0-writeback]    <noArgs>
root    207640    0.0    0.0    0    0    ?    I    07:32    0:00    02:18:53    [kworker/u20:1-kvfree_rcu_reclaim]    <noArgs>
root    215733    0.0    0.0    0    0    ?    I    08:24    0:00    01:26:49    [kworker/u17:0-kvfree_rcu_reclaim]    <noArgs>
root    217146    0.0    0.0    0    0    ?    I    08:32    0:00    01:19:23    [kworker/u17:2-kvfree_rcu_reclaim]    <noArgs>
root    219584    0.0    0.0    0    0    ?    I    08:47    0:00    01:03:56    [kworker/u17:1-ext4-rsv-conversion]    <noArgs>
root    221974    0.0    0.0    0    0    ?    I    09:02    0:00    49:32    [kworker/u20:0-ext4-rsv-conversion]    <noArgs>
root    227662    0.0    0.0    0    0    ?    I    09:39    0:00    11:58    [kworker/0:1-ata_sff]    <noArgs>
root    228092    0.0    0.0    0    0    ?    I    09:41    0:00    09:39    [kworker/1:0-ata_sff]    <noArgs>
root    228363    0.0    0.0    0    0    ?    I    09:45    0:00    06:36    [kworker/2:0-ata_sff]    <noArgs>
root    228443    0.0    0.0    0    0    ?    I    09:45    0:00    05:49    [kworker/3:2-ata_sff]    <noArgs>
xrdp    229053    1.1    0.4    61732    33612    ?    S    09:47    0:03    04:35    /usr/sbin/xrdp    <noArgs>
root    229054    0.0    0.0    0    0    ?    I    09:47    0:00    04:32    [kworker/u20:3-events_unbound]    <noArgs>
root    229108    0.0    0.0    0    0    ?    I    09:47    0:00    04:19    [kworker/1:1-ata_sff]    <noArgs>
root    229172    0.0    0.0    18320    4384    ?    S    09:47    0:00    03:39    /usr/sbin/xrdp-sesman    <noArgs>
pentester    229175    0.0    0.1    22908    13288    ?    Ss    09:47    0:00    03:39    /usr/lib/systemd/systemd    --user
pentester    229177    0.0    0.0    22592    3840    ?    S    09:47    0:00    03:39    (sd-pam)    <noArgs>
pentester    229197    0.0    0.0    8884    5668    ?    Ss    09:47    0:00    03:39    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
pentester    229198    0.0    0.0    97356    8068    ?    Ssl    09:47    0:00    03:39    /usr/bin/pipewire    <noArgs>
pentester    229199    0.1    1.0    621256    88836    ?    Sl    09:47    0:00    03:39    xfce4-session    <noArgs>
pentester    229200    0.6    1.6    387076    135600    ?    Sl    09:47    0:01    03:39    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    229203    0.0    0.0    7212    3564    ?    Ss    09:47    0:00    03:39    /usr/bin/mpris-proxy    <noArgs>
pentester    229204    0.0    0.1    399576    14256    ?    Ssl    09:47    0:00    03:39    /usr/bin/wireplumber    <noArgs>
pentester    229205    0.0    0.0    84704    5208    ?    Ssl    09:47    0:00    03:39    /usr/bin/pipewire    -c_filter-chain.conf
pentester    229206    0.0    0.1    99176    8872    ?    Ssl    09:47    0:00    03:39    /usr/bin/pipewire-pulse    <noArgs>
pentester    229229    0.0    0.1    98332    9488    ?    Sl    09:47    0:00    03:38    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    229306    0.0    0.0    10688    1820    ?    Ss    09:47    0:00    03:38    /usr/bin/ssh-agent    x-session-manager
pentester    229317    0.0    0.0    381172    7756    ?    Ssl    09:47    0:00    03:38    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    229324    0.0    0.0    8344    4812    ?    S    09:47    0:00    03:38    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    229328    0.0    0.0    307776    6568    ?    Ssl    09:47    0:00    03:38    /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd    <noArgs>
pentester    229334    0.0    0.0    168784    7580    ?    Sl    09:47    0:00    03:38    /usr/libexec/at-spi2-registryd    --use-gnome-session
pentester    229348    0.0    0.0    155488    3704    ?    SLsl    09:47    0:00    03:38    /usr/bin/gpg-agent    --supervised
pentester    229351    0.3    0.4    287760    39032    ?    Sl    09:47    0:00    03:38    xfwm4    <noArgs>
pentester    229356    0.0    0.0    312816    8048    ?    Ssl    09:47    0:00    03:38    /usr/libexec/gvfsd    <noArgs>
pentester    229362    0.0    0.0    398408    7524    ?    Sl    09:47    0:00    03:38    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    229373    0.0    0.3    348404    27324    ?    Sl    09:47    0:00    03:37    xfsettingsd    <noArgs>
pentester    229379    0.0    0.0    165276    5824    ?    Ssl    09:47    0:00    03:37    /usr/libexec/dconf-service    <noArgs>
pentester    229380    0.2    0.4    503204    40636    ?    Sl    09:47    0:00    03:37    xfce4-panel    <noArgs>
pentester    229389    0.0    0.3    420256    26144    ?    Sl    09:47    0:00    03:37    Thunar    --daemon
pentester    229402    0.2    0.8    663288    69336    ?    Sl    09:47    0:00    03:37    xfdesktop    <noArgs>
pentester    229407    0.0    0.5    428304    42504    ?    Sl    09:47    0:00    03:37    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_14680071_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    229412    0.0    0.0    7180    3420    ?    S    09:48    0:00    03:37    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    229417    0.0    0.2    405608    19288    ?    Sl    09:48    0:00    03:37    xfce4-power-manager    <noArgs>
pentester    229422    0.0    0.3    272284    26200    ?    Sl    09:48    0:00    03:37    xfce4-screensaver    <noArgs>
pentester    229426    0.0    0.4    606504    37656    ?    Sl    09:48    0:00    03:37    diodon    <noArgs>
pentester    229430    0.0    0.0    12432    1972    ?    Ssl    09:48    0:00    03:37    xcape    -e_Super_L_Control_L_Escape
pentester    229433    0.1    0.7    604468    61420    ?    Sl    09:48    0:00    03:37    /usr/bin/python3    /usr/bin/blueman-applet
pentester    229438    0.0    0.5    66232    40988    ?    S    09:48    0:00    03:37    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pentester    229439    0.0    0.2    481796    21432    ?    Ssl    09:48    0:00    03:37    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    229445    0.0    0.2    265304    18300    ?    Sl    09:48    0:00    03:37    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    229461    0.0    0.3    282404    28132    ?    SNsl    09:48    0:00    03:37    /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd    <noArgs>
pentester    229470    0.0    0.0    308560    6776    ?    Sl    09:48    0:00    03:36    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    229492    0.0    0.1    922612    8912    ?    Sl    09:48    0:00    03:36    xiccd    <noArgs>
pentester    229502    0.0    0.5    586928    43028    ?    Sl    09:48    0:00    03:36    nm-applet    <noArgs>
colord    229513    0.0    0.1    317016    15108    ?    Ssl    09:48    0:00    03:36    /usr/libexec/colord    <noArgs>
pentester    229540    0.0    0.1    457840    8880    ?    Ssl    09:48    0:00    03:36    /usr/bin/zeitgeist-daemon    <noArgs>
pentester    229545    0.0    0.0    95896    7632    ?    Sl    09:48    0:00    03:36    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
root    229556    0.0    0.1    318524    9932    ?    Ssl    09:48    0:00    03:36    /usr/libexec/upowerd    <noArgs>
pentester    229589    0.0    0.1    349660    13024    ?    Ssl    09:48    0:00    03:36    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    229626    0.2    0.7    310940    61356    ?    Sl    09:48    0:00    03:36    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_14680076_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    229627    0.0    0.4    499532    37984    ?    Sl    09:48    0:00    03:36    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_14680077_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    229628    0.2    0.3    272796    28968    ?    Sl    09:48    0:00    03:36    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_14680078_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    229629    0.0    0.4    359160    39208    ?    Sl    09:48    0:00    03:36    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_14680079_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    229631    0.0    0.4    425196    37464    ?    Sl    09:48    0:00    03:36    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_14680080_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    229632    0.0    0.4    286068    37668    ?    Sl    09:48    0:00    03:36    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_14680081_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    229643    0.0    0.4    425472    37552    ?    Sl    09:48    0:00    03:36    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_14680082_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    229715    0.0    0.1    538328    11880    ?    Ssl    09:48    0:00    03:35    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
root    229719    0.0    0.1    478372    13916    ?    Ssl    09:48    0:00    03:35    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    229731    0.0    0.0    307864    6656    ?    Ssl    09:48    0:00    03:35    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    229736    0.0    0.0    308884    7096    ?    Ssl    09:48    0:00    03:35    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    229741    0.0    0.0    307916    6752    ?    Ssl    09:48    0:00    03:35    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    229746    0.0    0.1    389944    8672    ?    Ssl    09:48    0:00    03:35    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    229760    0.0    0.0    168868    6664    ?    Ssl    09:48    0:00    03:35    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    229764    0.0    0.1    534256    9192    ?    Sl    09:48    0:00    03:35    /usr/libexec/gvfsd-trash    --spawner_:1.21_/org/gtk/gvfs/exec_spaw/0
pentester    230151    15.7    5.9    3196900    484516    ?    Sl    09:48    0:27    02:57    /usr/lib/firefox-esr/firefox-esr    <noArgs>
pentester    230167    0.0    0.0    20868    3136    ?    Sl    09:48    0:00    02:57    /usr/lib/firefox-esr/crashhelper    230151_9_/tmp/_11
pentester    230206    0.0    0.2    557248    19816    ?    Ssl    09:48    0:00    02:56    /usr/libexec/xdg-desktop-portal    <noArgs>
pentester    230212    0.0    0.0    308740    6648    ?    Ssl    09:48    0:00    02:56    /usr/libexec/xdg-permission-store    <noArgs>
pentester    230221    0.0    0.0    539704    7156    ?    Ssl    09:48    0:00    02:56    /usr/libexec/xdg-document-portal    <noArgs>
root    230230    0.0    0.0    2592    1940    ?    Ss    09:48    0:00    02:56    fusermount3    -o_rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal_--_/run/user/1001/doc
pentester    230234    0.0    0.2    479576    19636    ?    Ssl    09:48    0:00    02:56    /usr/libexec/xdg-desktop-portal-gtk    <noArgs>
pentester    230264    0.0    0.5    235304    44104    ?    Sl    09:48    0:00    02:56    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:26899_-prefMapHandle_1:268749_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{3b5842e7-2782-4808-b8ce-90ea35af8fe9}_-parentPid_230151_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_1_socket
pentester    230297    0.2    1.2    2465664    102360    ?    Sl    09:48    0:00    02:55    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:27829_-prefMapHandle_1:268749_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{2ec1fbab-7b18-430f-8d71-796c339e5cf4}_-parentPid_230151_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_2_tab
pentester    230302    0.0    0.6    373380    51524    ?    Sl    09:48    0:00    02:55    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:27874_-prefMapHandle_1:268749_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{aee1494b-faee-4e65-a9e3-cb07ffa333cd}_-parentPid_230151_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_3_rdd
pentester    230345    0.5    1.5    2478360    127092    ?    Sl    09:48    0:00    02:55    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:28089_-prefMapHandle_1:268749_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{9754adca-e9a2-4011-89d7-e58518a48a04}_-parentPid_230151_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_4_tab
pentester    230412    0.0    0.5    232684    41896    ?    Sl    09:48    0:00    02:53    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-sandboxingKind_0_-prefsHandle_0:39265_-prefMapHandle_1:268749_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{2f69adfc-4761-4d86-a872-394a70dd99d1}_-parentPid_230151_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_5_utility
pentester    230422    0.0    0.9    2429912    80332    ?    Sl    09:48    0:00    02:53    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:37555_-prefMapHandle_1:268749_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{1c119df1-8c30-402d-beb1-85b492230bd9}_-parentPid_230151_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_6_tab
pentester    230423    0.1    0.9    2429908    80436    ?    Sl    09:48    0:00    02:53    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:37555_-prefMapHandle_1:268749_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{1c5d75ab-0fd6-48dd-94ce-9da0aa87fa2f}_-parentPid_230151_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_7_tab
pentester    230438    0.0    0.9    2429912    80348    ?    Sl    09:48    0:00    02:53    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:37792_-prefMapHandle_1:268749_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{ade36305-8bdb-49a2-aa61-9ab18a7ef816}_-parentPid_230151_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_8_tab
pentester    230488    0.2    1.6    2490936    134420    ?    Sl    09:48    0:00    02:53    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:39703_-prefMapHandle_1:268749_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{8ad776df-82fc-478b-964b-eaf60a8dbfc1}_-parentPid_230151_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_9_tab
root    231289    0.0    0.0    0    0    ?    I    09:49    0:00    01:39    [kworker/0:0-ata_sff]    <noArgs>
root    231343    0.0    0.0    0    0    ?    I    09:50    0:00    01:33    [kworker/2:2-ata_sff]    <noArgs>
root    231902    0.0    0.0    0    0    ?    I    09:50    0:00    00:37    [kworker/3:0-ata_sff]    <noArgs>
pentester    232260    0.0    0.0    5588    2060    ?    S    09:51    0:00    00:06    sleep    10
root    232381    0.0    0.0    2688    1792    ?    S    09:51    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    232382    0.0    0.0    2688    1920    ?    S    09:51    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    232403    0.0    0.0    9504    4312    ?    R    09:51    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    232404    0.0    0.0    5592    1940    ?    S    09:51    0:00    00:00    tee    /dev/null
root    232405    0.0    0.0    9472    4052    ?    S    09:51    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24684    14908    ?    Ss    Jan08    0:02    23:45:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:45:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [ksoftirqd/3]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:34    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:34    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:34    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:45:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:45:34    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:45:34    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/2:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [kswapd0]    <noArgs>
root    74    0.0    0.0    0    0    ?    I    Jan08    0:05    23:45:33    [kworker/1:1-mm_percpu_wq]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/1:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/u25:0]    <noArgs>
root    176    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/0:1H-kblockd]    <noArgs>
root    205    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/3:1H-kblockd]    <noArgs>
root    261    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-ata_sff]    <noArgs>
root    262    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [scsi_eh_0]    <noArgs>
root    263    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    264    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [scsi_eh_1]    <noArgs>
root    265    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    268    0.0    0.0    0    0    ?    I    Jan08    0:04    23:45:32    [kworker/2:2-events]    <noArgs>
root    274    0.0    0.0    0    0    ?    I    Jan08    0:04    23:45:32    [kworker/0:2-events]    <noArgs>
root    306    0.0    0.0    0    0    ?    S    Jan08    0:01    23:45:31    [jbd2/vda1-8]    <noArgs>
root    307    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    331    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:31    [hwrng]    <noArgs>
root    384    0.0    0.3    58548    24788    ?    Ss    Jan08    0:00    23:45:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    400    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:45:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    421    0.0    0.1    37452    12068    ?    Ss    Jan08    0:00    23:45:30    /usr/lib/systemd/systemd-udevd    <noArgs>
root    430    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [psimon]    <noArgs>
root    564    0.0    0.0    8388    5224    ?    Ss    Jan08    0:01    23:45:29    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    609    0.0    0.0    10536    4528    ?    S    Jan08    0:00    23:45:29    dhcpcd:    eth0_[ip4]_[ip6]
root    610    0.0    0.0    10540    2448    ?    S    Jan08    0:00    23:45:29    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    611    0.0    0.0    10516    1912    ?    S    Jan08    0:00    23:45:29    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    612    0.0    0.0    10516    2056    ?    S    Jan08    0:00    23:45:29    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    614    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:29    [kworker/R-rpciod]    <noArgs>
root    615    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:29    [kworker/R-xprtiod]    <noArgs>
root    620    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    630    0.0    0.0    10540    2252    ?    S    Jan08    0:00    23:45:27    dhcpcd:    [BPF_ARP]_eth0_10.0.254.203
dhcpcd    631    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:45:27    dhcpcd:    [DHCP6_proxy]_fe80::d7e4:f71f:c3c3:344
dhcpcd    651    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:45:22    dhcpcd:    [BOOTP_proxy]_10.0.254.203
root    743    0.0    0.0    309036    7060    ?    Ssl    Jan08    0:00    23:45:22    /usr/libexec/accounts-daemon    <noArgs>
root    745    0.0    0.0    6876    2732    ?    Ss    Jan08    0:00    23:45:22    /usr/sbin/cron    -f
messagebus    746    0.0    0.0    10088    6476    ?    Ss    Jan08    0:00    23:45:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    748    0.0    0.1    382480    9880    ?    Ssl    Jan08    0:01    23:45:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    750    0.0    0.0    80876    3904    ?    Ssl    Jan08    0:00    23:45:22    /usr/sbin/qemu-ga    <noArgs>
root    754    0.0    0.1    18352    9108    ?    Ss    Jan08    0:00    23:45:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    788    0.0    0.2    336464    19088    ?    Ssl    Jan08    0:00    23:45:22    /usr/sbin/NetworkManager    --no-daemon
root    813    0.0    0.1    391060    12252    ?    Ssl    Jan08    0:00    23:45:22    /usr/sbin/ModemManager    <noArgs>
root    841    0.0    0.0    381356    7504    ?    Ssl    Jan08    0:00    23:45:22    /usr/sbin/lightdm    <noArgs>
root    843    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:22    [kworker/3:2H-kblockd]    <noArgs>
root    845    0.0    0.0    18320    4244    ?    S    Jan08    0:00    23:45:22    /usr/sbin/xrdp-sesman    <noArgs>
root    855    0.0    0.2    1904820    20556    ?    Ssl    Jan08    0:19    23:45:21    /laforge.bin    <noArgs>
xrdp    879    0.0    0.0    15652    2384    ?    S    Jan08    0:00    23:45:21    /usr/sbin/xrdp    <noArgs>
root    881    0.0    0.0    8124    2544    tty1    Ss+    Jan08    0:00    23:45:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    882    0.0    1.2    915128    104520    tty7    Ssl+    Jan08    0:02    23:45:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    905    0.0    0.1    169620    8308    ?    Sl    Jan08    0:00    23:45:20    lightdm    --session-child_17_20
lightdm    911    0.0    0.1    22800    13232    ?    Ss    Jan08    0:00    23:45:20    /usr/lib/systemd/systemd    --user
root    913    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:20    [psimon]    <noArgs>
lightdm    915    0.0    0.0    22712    3840    ?    S    Jan08    0:00    23:45:20    (sd-pam)    <noArgs>
lightdm    940    0.0    0.0    8348    4688    ?    Ss    Jan08    0:00    23:45:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    941    0.0    0.1    101240    10780    ?    S<sl    Jan08    0:00    23:45:20    /usr/bin/pipewire    <noArgs>
lightdm    944    0.0    1.2    666648    105576    ?    Ssl    Jan08    0:16    23:45:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    946    0.0    0.1    479268    16040    ?    S<sl    Jan08    0:00    23:45:20    /usr/bin/wireplumber    <noArgs>
lightdm    947    0.0    0.0    84704    5252    ?    Ssl    Jan08    0:00    23:45:20    /usr/bin/pipewire    -c_filter-chain.conf
rtkit    948    0.0    0.0    21492    3176    ?    SNsl    Jan08    0:00    23:45:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    949    0.0    0.1    98776    8172    ?    S<sl    Jan08    0:00    23:45:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    976    0.0    0.0    381080    7164    ?    Ssl    Jan08    0:00    23:45:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    989    0.0    0.0    8208    4404    ?    S    Jan08    0:00    23:45:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    992    0.0    0.0    312816    7856    ?    Ssl    Jan08    0:00    23:45:20    /usr/libexec/gvfsd    <noArgs>
lightdm    999    0.0    0.0    398408    7188    ?    Sl    Jan08    0:00    23:45:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1033    0.0    0.0    14372    5692    ?    S    Jan08    0:00    23:45:19    lightdm    --session-child_13_20
lightdm    1035    0.0    0.0    168772    7096    ?    Sl    Jan08    0:00    23:45:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1065    0.2    1.8    377776    151296    ?    Sl    Jan08    3:37    23:45:18    splunkd    -p_8089_start
root    1068    0.0    0.2    135648    17956    ?    Ss    Jan08    0:04    23:45:18    [splunkd    pid=1065]_splunkd_-p_8089_start_[process-runner]
root    1955    0.0    0.0    2688    1828    ?    S    Jan08    0:00    23:44:45    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1956    0.1    12.3    1414160    1005620    ?    Sl    Jan08    1:59    23:44:45    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    105668    0.0    0.0    0    0    ?    I    Jan08    0:00    12:51:09    [kworker/u20:0-flush-254:0]    <noArgs>
root    139999    0.0    0.0    0    0    ?    I    00:35    0:00    09:15:44    [kworker/u18:1-flush-254:0]    <noArgs>
root    172408    0.0    0.0    0    0    ?    I    03:57    0:00    05:53:47    [kworker/u19:2-events_unbound]    <noArgs>
root    174912    0.0    0.0    0    0    ?    I    04:11    0:00    05:39:16    [kworker/u19:0-flush-254:0]    <noArgs>
root    198290    0.0    0.0    0    0    ?    I    06:39    0:00    03:11:44    [kworker/u18:0-ext4-rsv-conversion]    <noArgs>
root    200766    0.0    0.0    0    0    ?    I    06:55    0:00    02:55:43    [kworker/u17:2-flush-254:0]    <noArgs>
root    202143    0.0    0.0    0    0    ?    I    07:05    0:00    02:45:31    [kworker/u18:2-kvfree_rcu_reclaim]    <noArgs>
root    205387    0.0    0.0    0    0    ?    I    07:22    0:00    02:28:16    [kworker/3:1-ata_sff]    <noArgs>
root    212499    0.0    0.0    0    0    ?    I    08:07    0:00    01:43:55    [kworker/u20:1-flush-254:0]    <noArgs>
root    215167    0.0    0.0    0    0    ?    I    08:25    0:00    01:25:43    [kworker/u19:1-flush-254:0]    <noArgs>
root    226034    0.0    0.0    0    0    ?    I    09:35    0:00    16:12    [kworker/u17:1-events_unbound]    <noArgs>
root    227427    0.0    0.0    0    0    ?    I    09:41    0:00    09:38    [kworker/3:0-ata_sff]    <noArgs>
root    227428    0.0    0.0    0    0    ?    I    09:41    0:00    09:32    [kworker/0:0-ata_sff]    <noArgs>
root    227504    0.0    0.0    0    0    ?    I    09:42    0:00    08:48    [kworker/1:2-ata_sff]    <noArgs>
root    227670    0.0    0.0    0    0    ?    I    09:44    0:00    06:59    [kworker/2:1-ata_sff]    <noArgs>
xrdp    228088    0.7    0.4    62196    40376    ?    S    09:46    0:02    04:49    /usr/sbin/xrdp    <noArgs>
root    228119    0.0    0.0    0    0    ?    I    09:46    0:00    04:21    [kworker/0:1-ata_sff]    <noArgs>
root    228135    0.0    0.0    0    0    ?    I    09:46    0:00    04:17    [kworker/3:2-mm_percpu_wq]    <noArgs>
root    228154    0.0    0.0    18320    4388    ?    S    09:47    0:00    04:08    /usr/sbin/xrdp-sesman    <noArgs>
pentester    228157    0.0    0.1    23072    13340    ?    Ss    09:47    0:00    04:08    /usr/lib/systemd/systemd    --user
pentester    228159    0.0    0.0    22592    3856    ?    S    09:47    0:00    04:07    (sd-pam)    <noArgs>
pentester    228179    0.0    0.0    8956    5680    ?    Ss    09:47    0:00    04:07    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
pentester    228180    0.0    0.0    97356    7976    ?    Ssl    09:47    0:00    04:07    /usr/bin/pipewire    <noArgs>
pentester    228181    0.1    1.2    630548    98312    ?    Sl    09:47    0:00    04:07    xfce4-session    <noArgs>
pentester    228182    0.6    1.7    396520    145008    ?    Sl    09:47    0:01    04:07    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    228185    0.0    0.0    7212    3480    ?    Ss    09:47    0:00    04:07    /usr/bin/mpris-proxy    <noArgs>
pentester    228186    0.0    0.1    473264    14284    ?    Ssl    09:47    0:00    04:07    /usr/bin/wireplumber    <noArgs>
pentester    228187    0.0    0.0    84704    5316    ?    Ssl    09:47    0:00    04:07    /usr/bin/pipewire    -c_filter-chain.conf
pentester    228188    0.0    0.1    99176    8904    ?    Ssl    09:47    0:00    04:07    /usr/bin/pipewire-pulse    <noArgs>
pentester    228212    0.0    0.0    95084    6220    ?    Sl    09:47    0:00    04:07    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    228289    0.0    0.0    10688    1860    ?    Ss    09:47    0:00    04:07    /usr/bin/ssh-agent    x-session-manager
pentester    228300    0.0    0.0    381172    7760    ?    Ssl    09:47    0:00    04:07    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    228307    0.0    0.0    8476    4900    ?    S    09:47    0:00    04:07    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    228311    0.0    0.0    307776    6708    ?    Ssl    09:47    0:00    04:07    /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd    <noArgs>
pentester    228318    0.0    0.0    168784    7764    ?    Sl    09:47    0:00    04:07    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    228329    0.0    0.0    0    0    ?    I    09:47    0:00    04:07    [kworker/u20:2-ext4-rsv-conversion]    <noArgs>
pentester    228332    0.0    0.0    155488    3748    ?    SLsl    09:47    0:00    04:07    /usr/bin/gpg-agent    --supervised
pentester    228335    0.3    0.5    297312    48744    ?    Sl    09:47    0:00    04:07    xfwm4    <noArgs>
pentester    228340    0.0    0.0    312816    8124    ?    Ssl    09:47    0:00    04:07    /usr/libexec/gvfsd    <noArgs>
pentester    228346    0.0    0.0    398408    7488    ?    Sl    09:47    0:00    04:06    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    228355    0.0    0.3    348404    26904    ?    Sl    09:47    0:00    04:06    xfsettingsd    <noArgs>
pentester    228361    0.0    0.0    165276    5968    ?    Ssl    09:47    0:00    04:06    /usr/libexec/dconf-service    <noArgs>
pentester    228362    0.2    0.5    509712    46992    ?    Sl    09:47    0:00    04:06    xfce4-panel    <noArgs>
pentester    228371    0.0    0.3    420208    26188    ?    Sl    09:47    0:00    04:06    Thunar    --daemon
pentester    228384    0.2    0.8    663280    70776    ?    Sl    09:47    0:00    04:06    xfdesktop    <noArgs>
pentester    228389    0.0    0.5    428300    42496    ?    Sl    09:47    0:00    04:06    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_14680071_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    228394    0.0    0.0    7180    3240    ?    S    09:47    0:00    04:06    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    228399    0.0    0.2    405608    19424    ?    Sl    09:47    0:00    04:06    xfce4-power-manager    <noArgs>
pentester    228403    0.0    0.4    281548    35556    ?    Sl    09:47    0:00    04:06    xfce4-screensaver    <noArgs>
pentester    228407    0.0    0.4    606504    37680    ?    Sl    09:47    0:00    04:05    diodon    <noArgs>
pentester    228409    0.0    0.0    12432    2064    ?    Ssl    09:47    0:00    04:05    xcape    -e_Super_L_Control_L_Escape
pentester    228413    0.1    0.7    604468    61636    ?    Sl    09:47    0:00    04:05    /usr/bin/python3    /usr/bin/blueman-applet
pentester    228414    0.0    0.5    66232    40888    ?    S    09:47    0:00    04:05    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pentester    228420    0.0    0.2    481796    21504    ?    Ssl    09:47    0:00    04:05    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    228429    0.0    0.2    265304    18544    ?    Sl    09:47    0:00    04:05    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    228452    0.0    0.0    308560    6808    ?    Sl    09:47    0:00    04:05    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    228454    0.0    0.1    725872    8924    ?    Sl    09:47    0:00    04:05    xiccd    <noArgs>
pentester    228469    0.0    0.3    282404    27964    ?    SNsl    09:47    0:00    04:05    /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd    <noArgs>
pentester    228475    0.0    0.5    586932    43264    ?    Sl    09:47    0:00    04:05    nm-applet    <noArgs>
colord    228491    0.0    0.1    317060    15276    ?    Ssl    09:47    0:00    04:05    /usr/libexec/colord    <noArgs>
root    228515    0.0    0.1    318516    10200    ?    Ssl    09:47    0:00    04:05    /usr/libexec/upowerd    <noArgs>
pentester    228526    0.0    0.0    95896    7600    ?    Sl    09:47    0:00    04:05    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
pentester    228537    0.0    0.1    457844    8916    ?    Ssl    09:47    0:00    04:05    /usr/bin/zeitgeist-daemon    <noArgs>
pentester    228593    0.0    0.1    349660    13020    ?    Ssl    09:47    0:00    04:05    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    228597    0.2    0.7    310940    61504    ?    Sl    09:47    0:00    04:05    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_14680076_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    228598    0.0    0.4    499480    38036    ?    Sl    09:47    0:00    04:05    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_14680077_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    228603    0.2    0.3    272796    29080    ?    Sl    09:47    0:00    04:05    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_14680078_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    228604    0.0    0.4    359164    39328    ?    Sl    09:47    0:00    04:05    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_14680079_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    228605    0.0    0.4    425196    37504    ?    Sl    09:47    0:00    04:05    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_14680080_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    228606    0.0    0.4    286068    37504    ?    Sl    09:47    0:00    04:05    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_14680081_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    228619    0.0    0.4    425472    37452    ?    Sl    09:47    0:00    04:05    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_14680082_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    228697    0.0    0.1    538332    11860    ?    Ssl    09:47    0:00    04:04    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
root    228701    0.0    0.1    478372    13988    ?    Ssl    09:47    0:00    04:04    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    228713    0.0    0.0    307864    6676    ?    Ssl    09:47    0:00    04:04    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    228718    0.0    0.0    308884    7208    ?    Ssl    09:47    0:00    04:04    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    228723    0.0    0.0    307916    6784    ?    Ssl    09:47    0:00    04:04    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    228728    0.0    0.1    389944    8816    ?    Ssl    09:47    0:00    04:04    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    228750    0.0    0.0    168868    6656    ?    Ssl    09:47    0:00    04:04    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    228754    0.0    0.1    534256    9296    ?    Sl    09:47    0:00    04:04    /usr/libexec/gvfsd-trash    --spawner_:1.21_/org/gtk/gvfs/exec_spaw/0
pentester    228810    0.0    0.2    630736    19992    ?    Ssl    09:47    0:00    04:01    /usr/libexec/xdg-desktop-portal    <noArgs>
pentester    228824    0.0    0.0    308740    6560    ?    Ssl    09:47    0:00    04:01    /usr/libexec/xdg-permission-store    <noArgs>
pentester    228833    0.0    0.0    539704    7156    ?    Ssl    09:47    0:00    04:01    /usr/libexec/xdg-document-portal    <noArgs>
root    228839    0.0    0.0    2592    1936    ?    Ss    09:47    0:00    04:01    fusermount3    -o_rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal_--_/run/user/1001/doc
pentester    228843    0.0    0.2    479576    19764    ?    Ssl    09:47    0:00    04:01    /usr/libexec/xdg-desktop-portal-gtk    <noArgs>
root    229181    0.0    0.0    0    0    ?    I    09:47    0:00    03:33    [kworker/1:0-ata_sff]    <noArgs>
pentester    230246    0.0    0.1    183152    10308    ?    SLsl    09:49    0:00    01:48    /usr/bin/gnome-keyring-daemon    --foreground_--components=pkcs11,secrets_--control-directory=/run/user/1001/keyring
root    230287    0.0    0.0    0    0    ?    I    09:49    0:00    01:45    [kworker/u18:3-ext4-rsv-conversion]    <noArgs>
root    230369    0.0    0.0    0    0    ?    I    09:49    0:00    01:38    [kworker/2:0-ata_sff]    <noArgs>
pentester    230864    0.2    0.7    801720    64048    ?    Sl    09:50    0:00    00:55    /usr/bin/qterminal    <noArgs>
pentester    230873    0.1    0.0    10148    6180    pts/0    Ss+    09:50    0:00    00:55    /usr/bin/zsh    <noArgs>
pentester    230891    0.5    0.7    801720    63764    ?    Sl    09:50    0:00    00:55    /usr/bin/qterminal    <noArgs>
pentester    230900    0.8    0.0    13620    7180    pts/1    Ss+    09:50    0:00    00:55    /usr/bin/zsh    <noArgs>
root    231583    0.0    0.0    2688    1788    ?    S    09:51    0:00    00:09    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    231584    0.0    0.0    2688    1852    ?    S    09:51    0:00    00:09    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    231605    0.0    0.0    5624    2296    ?    S    09:51    0:00    00:09    iostat    -xky_60_1
root    231606    0.0    0.0    5592    1948    ?    S    09:51    0:00    00:09    tee    /dev/null
root    231607    0.0    0.0    9472    4020    ?    S    09:51    0:00    00:09    awk    /Device/_&&_/r\/s/_&&_/w\/s/_{f=1;}f
pentester    231710    0.0    0.0    5588    2060    ?    S    09:51    0:00    00:05    sleep    10
root    231826    0.0    0.0    2688    1788    ?    S    09:51    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    231827    0.0    0.0    2688    1876    ?    S    09:51    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    231848    0.0    0.0    9504    4320    ?    R    09:51    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    231849    0.0    0.0    5592    1900    ?    S    09:51    0:00    00:00    tee    /dev/null
root    231850    0.0    0.0    9472    4048    ?    S    09:51    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}

_sourcetype: ps

source: ps

sourcetype: ps


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24668    15192    ?    Ss    Jan08    0:02    23:45:32    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:32    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:45:32    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:32    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:32    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:32    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:45:32    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:45:32    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:45:32    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:04    23:45:32    [kworker/3:1-events]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I    Jan08    0:04    23:45:32    [kworker/1:1-ata_sff]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/2:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/R-mld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/R-ipv6_addrconf]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/0:1H-kblockd]    <noArgs>
root    85    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:31    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    90    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/R-kstrp]    <noArgs>
root    96    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/u21:0]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/u22:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/u23:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/u24:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/u25:0]    <noArgs>
root    175    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/3:1H-kblockd]    <noArgs>
root    203    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/1:1H-kblockd]    <noArgs>
root    237    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/R-ata_sff]    <noArgs>
root    247    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:31    [scsi_eh_0]    <noArgs>
root    248    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/R-scsi_tmf_0]    <noArgs>
root    253    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:31    [scsi_eh_1]    <noArgs>
root    254    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/R-scsi_tmf_1]    <noArgs>
root    306    0.0    0.0    0    0    ?    S    Jan08    0:01    23:45:30    [jbd2/vda1-8]    <noArgs>
root    307    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    331    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [hwrng]    <noArgs>
root    386    0.0    0.3    58552    24668    ?    Ss    Jan08    0:00    23:45:29    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    416    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:45:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    420    0.0    0.1    37588    12132    ?    Ss    Jan08    0:00    23:45:28    /usr/lib/systemd/systemd-udevd    <noArgs>
root    429    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:28    [psimon]    <noArgs>
root    478    0.0    0.0    0    0    ?    I    Jan08    0:05    23:45:28    [kworker/0:3-events]    <noArgs>
root    562    0.0    0.0    8388    5408    ?    Ss    Jan08    0:01    23:45:27    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    608    0.0    0.0    10536    4532    ?    S    Jan08    0:00    23:45:27    dhcpcd:    eth0_[ip4]_[ip6]
root    609    0.0    0.0    10540    2508    ?    S    Jan08    0:00    23:45:27    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:45:27    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    611    0.0    0.0    10516    2116    ?    S    Jan08    0:00    23:45:27    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:27    [kworker/R-rpciod]    <noArgs>
root    614    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:27    [kworker/R-xprtiod]    <noArgs>
root    619    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:27    [kworker/R-cfg80211]    <noArgs>
dhcpcd    629    0.0    0.0    10540    2252    ?    S    Jan08    0:00    23:45:27    dhcpcd:    [BPF_ARP]_eth0_10.0.254.206
dhcpcd    630    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:45:26    dhcpcd:    [DHCP6_proxy]_fe80::e238:f0f2:3dec:5dcf
dhcpcd    649    0.0    0.0    10540    2316    ?    S    Jan08    0:00    23:45:21    dhcpcd:    [BOOTP_proxy]_10.0.254.206
root    742    0.0    0.0    309036    7360    ?    Ssl    Jan08    0:00    23:45:21    /usr/libexec/accounts-daemon    <noArgs>
root    744    0.0    0.0    6876    2748    ?    Ss    Jan08    0:00    23:45:21    /usr/sbin/cron    -f
messagebus    745    0.0    0.0    10116    6452    ?    Ss    Jan08    0:00    23:45:21    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    748    0.0    0.1    382480    10192    ?    Ssl    Jan08    0:01    23:45:21    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    749    0.0    0.0    80876    3988    ?    Ssl    Jan08    0:00    23:45:21    /usr/sbin/qemu-ga    <noArgs>
root    753    0.0    0.1    18496    9180    ?    Ss    Jan08    0:00    23:45:21    /usr/lib/systemd/systemd-logind    <noArgs>
root    774    0.0    0.2    336452    18816    ?    Ssl    Jan08    0:00    23:45:21    /usr/sbin/NetworkManager    --no-daemon
root    812    0.0    0.1    391060    12336    ?    Ssl    Jan08    0:00    23:45:21    /usr/sbin/ModemManager    <noArgs>
root    840    0.0    0.0    381364    7660    ?    Ssl    Jan08    0:00    23:45:20    /usr/sbin/lightdm    <noArgs>
root    842    0.0    0.0    18320    4376    ?    S    Jan08    0:00    23:45:20    /usr/sbin/xrdp-sesman    <noArgs>
root    853    0.0    0.2    1978552    20108    ?    Ssl    Jan08    0:19    23:45:20    /laforge.bin    <noArgs>
xrdp    878    0.0    0.0    15652    2420    ?    S    Jan08    0:00    23:45:20    /usr/sbin/xrdp    <noArgs>
root    880    0.0    1.2    915132    104424    tty7    Ssl+    Jan08    0:02    23:45:20    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    882    0.0    0.0    8124    2528    tty1    Ss+    Jan08    0:00    23:45:20    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    902    0.0    0.1    169620    8196    ?    Sl    Jan08    0:00    23:45:19    lightdm    --session-child_17_20
root    908    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:19    [psimon]    <noArgs>
lightdm    910    0.0    0.1    22448    12916    ?    Ss    Jan08    0:00    23:45:19    /usr/lib/systemd/systemd    --user
lightdm    912    0.0    0.0    22712    3828    ?    S    Jan08    0:00    23:45:19    (sd-pam)    <noArgs>
lightdm    940    0.0    0.0    8348    4552    ?    Ss    Jan08    0:00    23:45:19    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    941    0.0    0.1    101208    10600    ?    S<sl    Jan08    0:00    23:45:19    /usr/bin/pipewire    <noArgs>
lightdm    942    0.0    1.2    666648    105296    ?    Ssl    Jan08    0:16    23:45:19    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    943    0.0    0.1    479272    16104    ?    S<sl    Jan08    0:00    23:45:19    /usr/bin/wireplumber    <noArgs>
lightdm    944    0.0    0.0    84704    5036    ?    Ssl    Jan08    0:00    23:45:19    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    946    0.0    0.1    98776    8204    ?    S<sl    Jan08    0:00    23:45:19    /usr/bin/pipewire-pulse    <noArgs>
rtkit    947    0.0    0.0    21492    3180    ?    SNsl    Jan08    0:00    23:45:19    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    973    0.0    0.0    381080    7056    ?    Ssl    Jan08    0:00    23:45:19    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    982    0.0    0.0    8208    4524    ?    S    Jan08    0:00    23:45:19    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    987    0.0    0.0    312816    7860    ?    Ssl    Jan08    0:00    23:45:19    /usr/libexec/gvfsd    <noArgs>
lightdm    996    0.0    0.0    398408    7468    ?    Sl    Jan08    0:00    23:45:19    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1033    0.0    0.0    14372    5740    ?    S    Jan08    0:00    23:45:18    lightdm    --session-child_13_20
lightdm    1035    0.0    0.0    168772    7116    ?    Sl    Jan08    0:00    23:45:18    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1063    0.2    1.8    379824    148776    ?    Sl    Jan08    3:31    23:45:17    splunkd    -p_8089_start
root    1066    0.0    0.2    135648    18020    ?    Ss    Jan08    0:04    23:45:17    [splunkd    pid=1063]_splunkd_-p_8089_start_[process-runner]
root    1954    0.0    0.0    2688    1764    ?    S    Jan08    0:00    23:44:44    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1955    0.1    10.7    1414160    876412    ?    Sl    Jan08    1:49    23:44:44    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    2827    0.0    0.0    0    0    ?    I    Jan08    0:00    23:39:00    [kworker/u18:1-flush-254:0]    <noArgs>
root    9190    0.0    0.0    0    0    ?    I    Jan08    0:00    22:58:56    [kworker/u19:2-flush-254:0]    <noArgs>
root    22918    0.0    0.0    0    0    ?    I    Jan08    0:00    21:30:35    [kworker/u19:0-flush-254:0]    <noArgs>
root    46749    0.0    0.0    0    0    ?    I    Jan08    0:00    19:00:15    [kworker/u20:2-flush-254:0]    <noArgs>
root    103164    0.0    0.0    0    0    ?    I    Jan08    0:00    13:07:50    [kworker/u20:0-flush-254:0]    <noArgs>
root    121505    0.0    0.0    0    0    ?    I    Jan08    0:00    11:13:50    [kworker/u20:1-flush-254:0]    <noArgs>
root    132064    0.0    0.0    0    0    ?    I    Jan08    0:00    10:05:43    [kworker/u18:2-kvfree_rcu_reclaim]    <noArgs>
root    181502    0.0    0.0    0    0    ?    I    04:55    0:00    04:56:08    [kworker/u17:0-ext4-rsv-conversion]    <noArgs>
root    195613    0.0    0.0    0    0    ?    I    06:21    0:00    03:29:35    [kworker/u19:1-flush-254:0]    <noArgs>
root    200377    0.0    0.0    0    0    ?    I    06:51    0:00    02:59:33    [kworker/u17:1-kvfree_rcu_reclaim]    <noArgs>
root    214777    0.0    0.0    0    0    ?    I    08:21    0:00    01:29:35    [kworker/u17:2-events_unbound]    <noArgs>
root    214980    0.0    0.0    0    0    ?    I    08:23    0:00    01:27:38    [kworker/2:0-events]    <noArgs>
root    221214    0.0    0.0    0    0    ?    I    09:05    0:00    45:42    [kworker/u18:0-events_unbound]    <noArgs>
root    227487    0.0    0.0    0    0    ?    I    09:42    0:00    08:44    [kworker/1:2-ata_sff]    <noArgs>
root    227488    0.0    0.0    0    0    ?    I    09:42    0:00    08:40    [kworker/3:2-ata_sff]    <noArgs>
root    227639    0.0    0.0    0    0    ?    I    09:44    0:00    07:01    [kworker/2:2-ata_sff]    <noArgs>
root    227655    0.0    0.0    0    0    ?    I    09:44    0:00    06:51    [kworker/0:0-ata_sff]    <noArgs>
root    228196    0.0    0.0    0    0    ?    I    09:47    0:00    03:30    [kworker/3:0-ata_sff]    <noArgs>
root    228242    0.0    0.0    0    0    ?    I    09:48    0:00    02:58    [kworker/1:0-events]    <noArgs>
xrdp    228259    0.9    0.4    62164    40520    ?    S    09:48    0:01    02:44    /usr/sbin/xrdp    <noArgs>
root    228308    0.0    0.0    18320    4388    ?    S    09:48    0:00    02:18    /usr/sbin/xrdp-sesman    <noArgs>
pentester    228311    0.1    0.1    23076    13288    ?    Ss    09:48    0:00    02:18    /usr/lib/systemd/systemd    --user
pentester    228313    0.0    0.0    22592    3844    ?    S    09:48    0:00    02:18    (sd-pam)    <noArgs>
pentester    228333    0.1    0.0    8908    5700    ?    Ss    09:48    0:00    02:18    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
pentester    228334    0.0    0.0    97376    8024    ?    Ssl    09:48    0:00    02:18    /usr/bin/pipewire    <noArgs>
pentester    228335    0.2    1.2    630552    98116    ?    Sl    09:48    0:00    02:18    xfce4-session    <noArgs>
pentester    228336    0.8    1.8    397968    146468    ?    Sl    09:48    0:01    02:18    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    228339    0.0    0.0    7212    3512    ?    Ss    09:48    0:00    02:18    /usr/bin/mpris-proxy    <noArgs>
pentester    228340    0.0    0.1    473264    14316    ?    Ssl    09:48    0:00    02:18    /usr/bin/wireplumber    <noArgs>
pentester    228341    0.0    0.0    84704    5284    ?    Ssl    09:48    0:00    02:18    /usr/bin/pipewire    -c_filter-chain.conf
pentester    228342    0.0    0.1    99176    9000    ?    Ssl    09:48    0:00    02:18    /usr/bin/pipewire-pulse    <noArgs>
pentester    228366    0.0    0.0    95084    6284    ?    Sl    09:48    0:00    02:18    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    228443    0.0    0.0    10688    1856    ?    Ss    09:48    0:00    02:17    /usr/bin/ssh-agent    x-session-manager
pentester    228454    0.0    0.0    381172    7748    ?    Ssl    09:48    0:00    02:17    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    228461    0.0    0.0    8344    4784    ?    S    09:48    0:00    02:17    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    228465    0.1    0.0    307776    6664    ?    Ssl    09:48    0:00    02:17    /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd    <noArgs>
pentester    228472    0.0    0.0    168784    7576    ?    Sl    09:48    0:00    02:17    /usr/libexec/at-spi2-registryd    --use-gnome-session
pentester    228485    0.0    0.0    155488    3612    ?    SLsl    09:48    0:00    02:17    /usr/bin/gpg-agent    --supervised
pentester    228488    0.4    0.5    297308    48636    ?    Sl    09:48    0:00    02:17    xfwm4    <noArgs>
pentester    228493    0.0    0.1    312816    8180    ?    Ssl    09:48    0:00    02:17    /usr/libexec/gvfsd    <noArgs>
pentester    228499    0.0    0.0    398408    7480    ?    Sl    09:48    0:00    02:17    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    228508    0.1    0.3    348408    26716    ?    Sl    09:48    0:00    02:17    xfsettingsd    <noArgs>
pentester    228514    0.0    0.0    165276    5992    ?    Ssl    09:48    0:00    02:16    /usr/libexec/dconf-service    <noArgs>
pentester    228515    0.3    0.6    515208    52512    ?    Sl    09:48    0:00    02:16    xfce4-panel    <noArgs>
pentester    228524    0.0    0.3    420256    26476    ?    Sl    09:48    0:00    02:16    Thunar    --daemon
pentester    228536    0.3    0.8    663288    70048    ?    Sl    09:48    0:00    02:16    xfdesktop    <noArgs>
pentester    228542    0.1    0.5    428300    42620    ?    Sl    09:48    0:00    02:16    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_14680071_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    228547    0.0    0.0    7180    3280    ?    S    09:48    0:00    02:16    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    228552    0.0    0.2    405608    19332    ?    Sl    09:48    0:00    02:16    xfce4-power-manager    <noArgs>
pentester    228554    0.0    0.4    281552    35472    ?    Sl    09:48    0:00    02:16    xfce4-screensaver    <noArgs>
pentester    228559    0.0    0.4    606504    37536    ?    Sl    09:48    0:00    02:16    diodon    <noArgs>
pentester    228565    0.0    0.0    12432    1996    ?    Ssl    09:48    0:00    02:16    xcape    -e_Super_L_Control_L_Escape
pentester    228568    0.2    0.7    604468    61392    ?    Sl    09:48    0:00    02:16    /usr/bin/python3    /usr/bin/blueman-applet
pentester    228569    0.1    0.5    66232    40996    ?    S    09:48    0:00    02:16    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pentester    228574    0.0    0.2    416260    21660    ?    Ssl    09:48    0:00    02:16    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    228579    0.0    0.2    265304    18352    ?    Sl    09:48    0:00    02:16    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    228609    0.0    0.3    282400    28332    ?    SNsl    09:48    0:00    02:16    /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd    <noArgs>
pentester    228610    0.0    0.0    308560    6620    ?    Sl    09:48    0:00    02:16    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    228615    0.0    0.1    857076    9124    ?    Sl    09:48    0:00    02:16    xiccd    <noArgs>
pentester    228639    0.0    0.5    586932    43068    ?    Sl    09:48    0:00    02:16    nm-applet    <noArgs>
colord    228655    0.0    0.1    317060    15316    ?    Ssl    09:48    0:00    02:16    /usr/libexec/colord    <noArgs>
pentester    228664    0.0    0.0    95896    7544    ?    Sl    09:48    0:00    02:16    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
root    228682    0.0    0.1    318516    10200    ?    Ssl    09:48    0:00    02:16    /usr/libexec/upowerd    <noArgs>
pentester    228691    0.0    0.1    457848    8872    ?    Ssl    09:48    0:00    02:16    /usr/bin/zeitgeist-daemon    <noArgs>
pentester    228742    0.0    0.1    349660    13016    ?    Ssl    09:48    0:00    02:16    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    228761    0.2    0.7    310940    61388    ?    Sl    09:48    0:00    02:15    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_14680076_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    228762    0.0    0.4    499532    38124    ?    Sl    09:48    0:00    02:15    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_14680077_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    228763    0.2    0.3    272796    29004    ?    Sl    09:48    0:00    02:15    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_14680078_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    228764    0.0    0.4    359160    39240    ?    Sl    09:48    0:00    02:15    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_14680079_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    228765    0.0    0.4    425196    37284    ?    Sl    09:48    0:00    02:15    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_14680080_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    228768    0.0    0.4    286068    37432    ?    Sl    09:48    0:00    02:15    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_14680081_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    228777    0.0    0.4    425472    37680    ?    Sl    09:48    0:00    02:15    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_14680082_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    228850    0.0    0.1    538332    11900    ?    Ssl    09:48    0:00    02:14    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
root    228854    0.0    0.1    478376    13960    ?    Ssl    09:49    0:00    02:14    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    228866    0.0    0.0    307864    6728    ?    Ssl    09:49    0:00    02:14    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    228876    0.0    0.0    308884    7088    ?    Ssl    09:49    0:00    02:14    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    228884    0.0    0.0    307916    6828    ?    Ssl    09:49    0:00    02:14    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    228889    0.0    0.1    389944    8784    ?    Ssl    09:49    0:00    02:14    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    228903    0.0    0.0    168868    6684    ?    Ssl    09:49    0:00    02:14    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    228907    0.0    0.1    534256    9164    ?    Sl    09:49    0:00    02:14    /usr/libexec/gvfsd-trash    --spawner_:1.21_/org/gtk/gvfs/exec_spaw/0
pentester    228954    0.5    0.7    800084    63560    ?    Sl    09:49    0:00    02:10    /usr/bin/qterminal    <noArgs>
pentester    228956    0.0    0.2    557036    19848    ?    Ssl    09:49    0:00    02:10    /usr/libexec/xdg-desktop-portal    <noArgs>
pentester    228965    0.0    0.0    308740    6876    ?    Ssl    09:49    0:00    02:10    /usr/libexec/xdg-permission-store    <noArgs>
pentester    228971    0.0    0.0    539704    7124    ?    Ssl    09:49    0:00    02:10    /usr/libexec/xdg-document-portal    <noArgs>
root    228977    0.0    0.0    2592    2020    ?    Ss    09:49    0:00    02:10    fusermount3    -o_rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal_--_/run/user/1001/doc
pentester    228982    0.0    0.2    479576    19724    ?    Ssl    09:49    0:00    02:10    /usr/libexec/xdg-desktop-portal-gtk    <noArgs>
pentester    228991    1.0    0.0    10588    6584    pts/0    Ss+    09:49    0:01    02:10    /usr/bin/zsh    <noArgs>
root    229273    0.0    0.0    0    0    ?    I    09:49    0:00    01:47    [kworker/u20:3-writeback]    <noArgs>
root    229328    0.0    0.0    0    0    ?    I    09:49    0:00    01:41    [kworker/0:1-ata_sff]    <noArgs>
root    229595    0.0    0.0    0    0    ?    I    09:49    0:00    01:17    [kworker/2:1-ata_sff]    <noArgs>
pentester    229940    0.0    0.1    183152    10136    ?    SLsl    09:50    0:00    00:43    /usr/bin/gnome-keyring-daemon    --foreground_--components=pkcs11,secrets_--control-directory=/run/user/1001/keyring
root    230578    0.0    0.0    2688    1760    ?    S    09:51    0:00    00:08    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    230579    0.0    0.0    2688    1924    ?    S    09:51    0:00    00:08    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    230600    0.0    0.0    5624    2256    ?    S    09:51    0:00    00:08    iostat    -xky_60_1
root    230601    0.0    0.0    5592    1968    ?    S    09:51    0:00    00:08    tee    /dev/null
root    230602    0.0    0.0    9472    4056    ?    S    09:51    0:00    00:08    awk    /Device/_&&_/r\/s/_&&_/w\/s/_{f=1;}f
pentester    230643    0.0    0.0    5588    2084    ?    S    09:51    0:00    00:06    sleep    10
root    230818    0.0    0.0    2688    1732    ?    S    09:51    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    230819    0.0    0.0    2688    1920    ?    S    09:51    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    230840    100    0.0    9504    4320    ?    R    09:51    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    230841    0.0    0.0    5592    1956    ?    S    09:51    0:00    00:00    tee    /dev/null
root    230842    0.0    0.0    9472    4008    ?    S    09:51    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}