_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24704    14900    ?    Ss    Jan08    0:02    23:50:31    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:31    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:50:31    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [ksoftirqd/1]    <noArgs>
root    25    0.0    0.0    0    0    ?    I    Jan08    0:06    23:50:31    [kworker/1:0-events]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:31    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:31    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:31    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:50:31    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:31    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:31    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/2:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:30    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:30    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:30    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I    Jan08    0:05    23:50:30    [kworker/2:2-events]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:30    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:30    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:30    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:30    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:30    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:30    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:30    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:30    [kworker/u25:0]    <noArgs>
root    203    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:30    [kworker/1:1H-kblockd]    <noArgs>
root    208    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:30    [kworker/0:1H-kblockd]    <noArgs>
root    234    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/3:1H-kblockd]    <noArgs>
root    255    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/R-ata_sff]    <noArgs>
root    263    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:29    [scsi_eh_0]    <noArgs>
root    264    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/R-scsi_tmf_0]    <noArgs>
root    265    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:29    [scsi_eh_1]    <noArgs>
root    266    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/R-scsi_tmf_1]    <noArgs>
root    305    0.0    0.0    0    0    ?    S    Jan08    0:01    23:50:29    [jbd2/vda1-8]    <noArgs>
root    306    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    330    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:28    [hwrng]    <noArgs>
root    385    0.0    0.3    50352    24768    ?    Ss    Jan08    0:00    23:50:27    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7416    ?    Ssl    Jan08    0:00    23:50:27    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    420    0.0    0.1    37452    12176    ?    Ss    Jan08    0:00    23:50:27    /usr/lib/systemd/systemd-udevd    <noArgs>
root    426    0.0    0.0    0    0    ?    I    Jan08    0:05    23:50:27    [kworker/0:3-events]    <noArgs>
root    429    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:27    [psimon]    <noArgs>
root    562    0.0    0.0    8388    6188    ?    Ss    Jan08    0:02    23:50:26    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    609    0.0    0.0    10532    4524    ?    S    Jan08    0:00    23:50:26    dhcpcd:    eth0_[ip4]_[ip6]
root    610    0.0    0.0    10540    2508    ?    S    Jan08    0:00    23:50:26    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    611    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:50:26    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    612    0.0    0.0    10516    2116    ?    S    Jan08    0:00    23:50:26    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    614    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:26    [kworker/R-rpciod]    <noArgs>
root    615    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:26    [kworker/R-xprtiod]    <noArgs>
root    620    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:26    [kworker/R-cfg80211]    <noArgs>
dhcpcd    630    0.0    0.0    10540    2252    ?    S    Jan08    0:00    23:50:26    dhcpcd:    [BPF_ARP]_eth0_10.0.254.203
dhcpcd    631    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:50:24    dhcpcd:    [DHCP6_proxy]_fe80::db22:46bb:ab35:f093
dhcpcd    650    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:50:21    dhcpcd:    [BOOTP_proxy]_10.0.254.203
root    743    0.0    0.0    309036    7192    ?    Ssl    Jan08    0:00    23:50:21    /usr/libexec/accounts-daemon    <noArgs>
root    745    0.0    0.0    6876    2664    ?    Ss    Jan08    0:00    23:50:21    /usr/sbin/cron    -f
messagebus    746    0.0    0.0    9952    6596    ?    Ss    Jan08    0:00    23:50:21    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    748    0.0    0.1    382480    9884    ?    Ssl    Jan08    0:02    23:50:21    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    749    0.0    0.0    80876    3980    ?    Ssl    Jan08    0:00    23:50:21    /usr/sbin/qemu-ga    <noArgs>
root    754    0.0    0.1    18480    9160    ?    Ss    Jan08    0:00    23:50:21    /usr/lib/systemd/systemd-logind    <noArgs>
root    776    0.0    0.2    336464    18804    ?    Ssl    Jan08    0:00    23:50:21    /usr/sbin/NetworkManager    --no-daemon
root    813    0.0    0.1    391060    12576    ?    Ssl    Jan08    0:00    23:50:21    /usr/sbin/ModemManager    <noArgs>
root    836    0.0    0.0    381356    7696    ?    Ssl    Jan08    0:00    23:50:20    /usr/sbin/lightdm    <noArgs>
root    843    0.0    0.0    18320    4288    ?    S    Jan08    0:00    23:50:20    /usr/sbin/xrdp-sesman    <noArgs>
root    850    0.0    0.2    1904820    20676    ?    Ssl    Jan08    0:20    23:50:20    /laforge.bin    <noArgs>
xrdp    877    0.0    0.0    15652    2564    ?    S    Jan08    0:00    23:50:20    /usr/sbin/xrdp    <noArgs>
root    879    0.0    1.2    915128    102868    tty7    Ssl+    Jan08    0:02    23:50:20    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    881    0.0    0.0    8124    2528    tty1    Ss+    Jan08    0:00    23:50:20    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    904    0.0    0.1    169620    8276    ?    Sl    Jan08    0:00    23:50:19    lightdm    --session-child_17_20
lightdm    910    0.0    0.1    22644    13072    ?    Ss    Jan08    0:00    23:50:19    /usr/lib/systemd/systemd    --user
root    912    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:19    [psimon]    <noArgs>
lightdm    914    0.0    0.0    22712    3848    ?    S    Jan08    0:00    23:50:19    (sd-pam)    <noArgs>
lightdm    935    0.0    0.0    8348    4672    ?    Ss    Jan08    0:00    23:50:19    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    937    0.0    0.1    101160    10764    ?    S<sl    Jan08    0:00    23:50:19    /usr/bin/pipewire    <noArgs>
lightdm    939    0.0    1.2    666648    105456    ?    Ssl    Jan08    0:17    23:50:19    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    941    0.0    0.1    413748    16008    ?    S<sl    Jan08    0:00    23:50:19    /usr/bin/wireplumber    <noArgs>
lightdm    942    0.0    0.0    84704    5180    ?    Ssl    Jan08    0:00    23:50:19    /usr/bin/pipewire    -c_filter-chain.conf
rtkit    943    0.0    0.0    21492    3148    ?    SNsl    Jan08    0:00    23:50:19    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    944    0.0    0.1    98776    8280    ?    S<sl    Jan08    0:00    23:50:19    /usr/bin/pipewire-pulse    <noArgs>
lightdm    969    0.0    0.0    381080    7180    ?    Ssl    Jan08    0:00    23:50:19    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    978    0.0    0.0    8208    4468    ?    S    Jan08    0:00    23:50:19    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    982    0.0    0.0    312816    8100    ?    Ssl    Jan08    0:00    23:50:19    /usr/libexec/gvfsd    <noArgs>
lightdm    995    0.0    0.0    398408    7428    ?    Sl    Jan08    0:00    23:50:19    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1032    0.0    0.0    14372    5788    ?    S    Jan08    0:00    23:50:18    lightdm    --session-child_13_20
lightdm    1034    0.0    0.0    168772    7108    ?    Sl    Jan08    0:00    23:50:18    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1064    0.2    1.8    377776    151400    ?    Sl    Jan08    4:06    23:50:17    splunkd    -p_8089_start
root    1067    0.0    0.2    135648    17864    ?    Ss    Jan08    0:04    23:50:17    [splunkd    pid=1064]_splunkd_-p_8089_start_[process-runner]
root    1904    0.0    0.0    2688    1748    ?    S    Jan08    0:00    23:49:44    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1905    0.1    10.2    1414160    831528    ?    Sl    Jan08    2:14    23:49:44    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    16223    0.0    0.0    0    0    ?    I    Jan08    0:04    22:19:36    [kworker/3:0-ata_sff]    <noArgs>
root    69739    0.0    0.0    0    0    ?    I    Jan08    0:00    16:43:50    [kworker/u17:0-events_unbound]    <noArgs>
root    155895    0.0    0.0    0    0    ?    I    02:12    0:00    07:42:21    [kworker/u18:0-writeback]    <noArgs>
root    169218    0.0    0.0    0    0    ?    I    03:35    0:00    06:19:34    [kworker/u20:1-flush-254:0]    <noArgs>
root    179191    0.0    0.0    0    0    ?    I    04:38    0:00    05:16:05    [kworker/u19:2-ext4-rsv-conversion]    <noArgs>
root    193333    0.0    0.0    0    0    ?    I    06:05    0:00    03:48:56    [kworker/u19:0-kvfree_rcu_reclaim]    <noArgs>
root    194279    0.0    0.0    0    0    ?    I    06:13    0:00    03:41:25    [kworker/u20:0-flush-254:0]    <noArgs>
root    195725    0.0    0.0    0    0    ?    I    06:21    0:00    03:33:49    [kworker/u20:2-ext4-rsv-conversion]    <noArgs>
root    200342    0.0    0.0    0    0    ?    I    06:50    0:00    03:04:34    [kworker/u19:1-kvfree_rcu_reclaim]    <noArgs>
root    200545    0.0    0.0    0    0    ?    I    06:52    0:00    03:02:39    [kworker/u18:1-flush-254:0]    <noArgs>
root    217161    0.0    0.0    0    0    ?    I    08:35    0:00    01:19:21    [kworker/u18:2-flush-254:0]    <noArgs>
root    226108    0.0    0.0    0    0    ?    I    09:34    0:00    20:22    [kworker/u17:1-flush-254:0]    <noArgs>
root    227538    0.0    0.0    0    0    ?    I    09:41    0:00    13:21    [kworker/u17:2-ext4-rsv-conversion]    <noArgs>
root    228105    0.0    0.0    0    0    ?    I    09:45    0:00    09:36    [kworker/0:0-ata_sff]    <noArgs>
root    228181    0.0    0.0    0    0    ?    I    09:46    0:00    08:50    [kworker/1:1-ata_sff]    <noArgs>
root    228182    0.0    0.0    0    0    ?    I    09:46    0:00    08:48    [kworker/2:0-ata_sff]    <noArgs>
root    228243    0.0    0.0    0    0    ?    I    09:46    0:00    08:08    [kworker/3:2-ata_sff]    <noArgs>
root    229114    0.0    0.0    0    0    ?    I    09:50    0:00    04:16    [kworker/0:1-ata_sff]    <noArgs>
root    229175    0.0    0.0    0    0    ?    I    09:51    0:00    03:35    [kworker/2:1-ata_sff]    <noArgs>
xrdp    229192    0.3    0.4    61732    36444    ?    S    09:51    0:00    03:29    /usr/sbin/xrdp    <noArgs>
root    229193    0.0    0.0    0    0    ?    I    09:51    0:00    03:29    [kworker/1:2-ata_sff]    <noArgs>
root    229254    0.0    0.0    0    0    ?    I    09:52    0:00    02:41    [kworker/3:1-events]    <noArgs>
root    229348    0.0    0.0    18320    4420    ?    S    09:53    0:00    01:43    /usr/sbin/xrdp-sesman    <noArgs>
pentester    229351    0.1    0.1    22908    13296    ?    Ss    09:53    0:00    01:43    /usr/lib/systemd/systemd    --user
pentester    229353    0.0    0.0    22592    3844    ?    S    09:53    0:00    01:43    (sd-pam)    <noArgs>
pentester    229373    0.1    0.0    8900    5756    ?    Ss    09:53    0:00    01:43    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
pentester    229374    0.0    0.0    97360    8036    ?    Ssl    09:53    0:00    01:43    /usr/bin/pipewire    <noArgs>
pentester    229375    0.2    1.2    630548    97940    ?    Sl    09:53    0:00    01:43    xfce4-session    <noArgs>
pentester    229376    0.7    1.7    402616    143752    ?    Sl    09:53    0:00    01:43    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    229379    0.0    0.0    7212    3552    ?    Ss    09:53    0:00    01:43    /usr/bin/mpris-proxy    <noArgs>
pentester    229380    0.0    0.1    399580    14400    ?    Ssl    09:53    0:00    01:43    /usr/bin/wireplumber    <noArgs>
pentester    229381    0.0    0.0    84704    5164    ?    Ssl    09:53    0:00    01:43    /usr/bin/pipewire    -c_filter-chain.conf
pentester    229382    0.0    0.1    99176    8940    ?    Ssl    09:53    0:00    01:43    /usr/bin/pipewire-pulse    <noArgs>
pentester    229405    0.0    0.0    95084    6168    ?    Sl    09:53    0:00    01:42    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    229482    0.0    0.0    10688    1860    ?    Ss    09:53    0:00    01:42    /usr/bin/ssh-agent    x-session-manager
pentester    229493    0.0    0.0    381172    7656    ?    Ssl    09:53    0:00    01:42    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    229500    0.0    0.0    8344    4932    ?    S    09:53    0:00    01:42    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    229504    0.1    0.0    307776    6480    ?    Ssl    09:53    0:00    01:42    /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd    <noArgs>
pentester    229511    0.0    0.0    168784    7784    ?    Sl    09:53    0:00    01:42    /usr/libexec/at-spi2-registryd    --use-gnome-session
pentester    229524    0.0    0.0    155488    3696    ?    SLsl    09:53    0:00    01:42    /usr/bin/gpg-agent    --supervised
pentester    229527    0.4    0.5    297308    48280    ?    Sl    09:53    0:00    01:42    xfwm4    <noArgs>
pentester    229532    0.0    0.0    312816    8020    ?    Ssl    09:53    0:00    01:42    /usr/libexec/gvfsd    <noArgs>
pentester    229538    0.0    0.0    398408    7364    ?    Sl    09:53    0:00    01:42    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    229547    0.1    0.3    348408    26712    ?    Sl    09:53    0:00    01:41    xfsettingsd    <noArgs>
pentester    229553    0.0    0.0    165276    6008    ?    Ssl    09:53    0:00    01:41    /usr/libexec/dconf-service    <noArgs>
pentester    229554    0.4    0.6    515208    52516    ?    Sl    09:53    0:00    01:41    xfce4-panel    <noArgs>
pentester    229563    0.0    0.3    420260    26392    ?    Sl    09:53    0:00    01:41    Thunar    --daemon
pentester    229576    0.4    0.8    663288    69416    ?    Sl    09:53    0:00    01:41    xfdesktop    <noArgs>
pentester    229581    0.1    0.5    428300    42616    ?    Sl    09:53    0:00    01:41    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_14680071_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    229586    0.0    0.0    7180    3376    ?    S    09:53    0:00    01:41    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    229591    0.0    0.2    405608    19340    ?    Sl    09:53    0:00    01:41    xfce4-power-manager    <noArgs>
pentester    229592    0.0    0.4    281548    35424    ?    Sl    09:53    0:00    01:41    xfce4-screensaver    <noArgs>
pentester    229598    0.0    0.4    532772    37452    ?    Sl    09:53    0:00    01:41    diodon    <noArgs>
pentester    229601    0.0    0.0    12432    1868    ?    Ssl    09:53    0:00    01:41    xcape    -e_Super_L_Control_L_Escape
pentester    229604    0.3    0.7    612664    61252    ?    Sl    09:53    0:00    01:41    /usr/bin/python3    /usr/bin/blueman-applet
pentester    229606    0.1    0.5    66232    41056    ?    S    09:53    0:00    01:41    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pentester    229614    0.0    0.2    265304    18344    ?    Sl    09:53    0:00    01:41    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    229620    0.0    0.2    481796    21612    ?    Ssl    09:53    0:00    01:41    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    229635    0.0    0.0    308560    6768    ?    Sl    09:53    0:00    01:41    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    229643    0.0    0.1    308200    8764    ?    Sl    09:53    0:00    01:41    xiccd    <noArgs>
pentester    229644    0.0    0.3    282408    28016    ?    SNsl    09:53    0:00    01:41    /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd    <noArgs>
pentester    229654    0.0    0.5    586932    43020    ?    Sl    09:53    0:00    01:41    nm-applet    <noArgs>
colord    229677    0.1    0.1    317060    15196    ?    Ssl    09:53    0:00    01:41    /usr/libexec/colord    <noArgs>
pentester    229716    0.0    0.1    457848    8784    ?    Ssl    09:53    0:00    01:41    /usr/bin/zeitgeist-daemon    <noArgs>
pentester    229724    0.0    0.0    95896    7556    ?    Sl    09:53    0:00    01:41    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
root    229738    0.0    0.1    318516    10244    ?    Ssl    09:53    0:00    01:41    /usr/libexec/upowerd    <noArgs>
pentester    229770    0.0    0.1    349660    13016    ?    Ssl    09:53    0:00    01:40    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    229792    0.2    0.7    311268    64280    ?    Sl    09:53    0:00    01:40    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_14680076_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    229793    0.0    0.4    499532    38124    ?    Sl    09:53    0:00    01:40    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_14680077_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    229794    0.2    0.3    272796    29016    ?    Sl    09:53    0:00    01:40    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_14680078_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    229795    0.0    0.4    359160    39504    ?    Sl    09:53    0:00    01:40    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_14680079_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    229796    0.0    0.4    425196    37300    ?    Sl    09:53    0:00    01:40    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_14680080_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    229797    0.0    0.4    286068    37552    ?    Sl    09:53    0:00    01:40    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_14680081_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    229812    0.0    0.4    425472    37492    ?    Sl    09:53    0:00    01:40    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_14680082_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    229895    0.0    0.1    538328    11904    ?    Ssl    09:53    0:00    01:39    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
root    229899    0.0    0.1    478372    13924    ?    Ssl    09:53    0:00    01:39    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    229911    0.0    0.0    307864    6836    ?    Ssl    09:53    0:00    01:39    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    229916    0.0    0.0    308884    7352    ?    Ssl    09:53    0:00    01:39    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    229921    0.0    0.0    307916    6784    ?    Ssl    09:53    0:00    01:39    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    229926    0.0    0.1    389944    8892    ?    Ssl    09:53    0:00    01:39    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    229940    0.0    0.0    168868    6708    ?    Ssl    09:53    0:00    01:39    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    229948    0.0    0.1    534256    9284    ?    Sl    09:53    0:00    01:39    /usr/libexec/gvfsd-trash    --spawner_:1.21_/org/gtk/gvfs/exec_spaw/0
pentester    230171    0.2    0.7    799856    63424    ?    Sl    09:53    0:00    01:19    /usr/bin/qterminal    <noArgs>
pentester    230173    0.0    0.2    557012    19844    ?    Ssl    09:53    0:00    01:19    /usr/libexec/xdg-desktop-portal    <noArgs>
pentester    230180    0.0    0.0    308740    6596    ?    Ssl    09:53    0:00    01:19    /usr/libexec/xdg-permission-store    <noArgs>
pentester    230188    0.0    0.0    539704    7004    ?    Ssl    09:53    0:00    01:19    /usr/libexec/xdg-document-portal    <noArgs>
root    230194    0.0    0.0    2592    2008    ?    Ss    09:53    0:00    01:19    fusermount3    -o_rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal_--_/run/user/1001/doc
pentester    230197    0.0    0.2    479576    19656    ?    Ssl    09:53    0:00    01:19    /usr/libexec/xdg-desktop-portal-gtk    <noArgs>
pentester    230209    0.8    0.0    10328    6356    pts/0    Ss+    09:53    0:00    01:19    /usr/bin/zsh    <noArgs>
root    230287    0.0    0.0    0    0    ?    I    09:53    0:00    01:12    [kworker/u17:3]    <noArgs>
pentester    231104    0.0    0.0    5588    2068    ?    S    09:54    0:00    00:01    sleep    10
root    231128    0.0    0.0    2688    1752    ?    S    09:54    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    231129    0.0    0.0    2688    1844    ?    S    09:54    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    231150    0.0    0.0    9504    4316    ?    R    09:54    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    231151    0.0    0.0    5592    1944    ?    S    09:54    0:00    00:00    tee    /dev/null
root    231152    0.0    0.0    9472    4108    ?    S    09:54    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24664    15608    ?    Ss    Jan08    0:02    23:50:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:50:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/3]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:50:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:34    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:34    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:04    23:50:34    [kworker/2:1-ata_sff]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-devfreq_wq]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/1:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-mld]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/2:1H-kblockd]    <noArgs>
root    87    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    92    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kstrp]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u21:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u22:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u23:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u24:0]    <noArgs>
root    102    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u25:0]    <noArgs>
root    201    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/0:1H-kblockd]    <noArgs>
root    203    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/3:1H-kblockd]    <noArgs>
root    234    0.0    0.0    0    0    ?    I    Jan08    0:04    23:50:33    [kworker/1:2-events]    <noArgs>
root    258    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-ata_sff]    <noArgs>
root    260    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [scsi_eh_0]    <noArgs>
root    261    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    262    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [scsi_eh_1]    <noArgs>
root    263    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    268    0.0    0.0    0    0    ?    I    Jan08    0:04    23:50:32    [kworker/0:2-events]    <noArgs>
root    303    0.0    0.0    0    0    ?    S    Jan08    0:01    23:50:32    [jbd2/vda1-8]    <noArgs>
root    304    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [hwrng]    <noArgs>
root    382    0.0    0.3    50356    24540    ?    Ss    Jan08    0:00    23:50:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7476    ?    Ssl    Jan08    0:00    23:50:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    421    0.0    0.1    37452    12108    ?    Ss    Jan08    0:00    23:50:30    /usr/lib/systemd/systemd-udevd    <noArgs>
root    429    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:30    [psimon]    <noArgs>
root    567    0.0    0.0    8388    6636    ?    Ss    Jan08    0:01    23:50:29    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    607    0.0    0.0    10528    4520    ?    S    Jan08    0:00    23:50:29    dhcpcd:    eth0_[ip4]_[ip6]
root    608    0.0    0.0    10532    2440    ?    S    Jan08    0:00    23:50:29    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2044    ?    S    Jan08    0:00    23:50:29    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:50:29    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/R-rpciod]    <noArgs>
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/R-xprtiod]    <noArgs>
root    618    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    628    0.0    0.0    10532    2244    ?    S    Jan08    0:00    23:50:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.201
dhcpcd    629    0.0    0.0    10532    2372    ?    S    Jan08    0:00    23:50:28    dhcpcd:    [DHCP6_proxy]_fe80::aed:3f97:b451:242c
dhcpcd    648    0.0    0.0    10532    2372    ?    S    Jan08    0:00    23:50:23    dhcpcd:    [BOOTP_proxy]_10.0.254.201
root    741    0.0    0.0    309036    7252    ?    Ssl    Jan08    0:00    23:50:23    /usr/libexec/accounts-daemon    <noArgs>
root    743    0.0    0.0    6876    2700    ?    Ss    Jan08    0:00    23:50:23    /usr/sbin/cron    -f
messagebus    744    0.0    0.0    10080    6492    ?    Ss    Jan08    0:00    23:50:23    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    746    0.0    0.1    382480    9952    ?    Ssl    Jan08    0:01    23:50:23    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    748    0.0    0.0    80876    3900    ?    Ssl    Jan08    0:00    23:50:23    /usr/sbin/qemu-ga    <noArgs>
root    750    0.0    0.1    18484    9140    ?    Ss    Jan08    0:00    23:50:23    /usr/lib/systemd/systemd-logind    <noArgs>
root    772    0.0    0.2    336476    19100    ?    Ssl    Jan08    0:00    23:50:23    /usr/sbin/NetworkManager    --no-daemon
root    810    0.0    0.1    391064    12392    ?    Ssl    Jan08    0:00    23:50:23    /usr/sbin/ModemManager    <noArgs>
root    830    0.0    0.0    381356    7796    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/lightdm    <noArgs>
root    841    0.0    0.0    18320    4288    ?    S    Jan08    0:00    23:50:22    /usr/sbin/xrdp-sesman    <noArgs>
root    842    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:22    [kworker/3:2H]    <noArgs>
root    850    0.0    0.2    1904820    20580    ?    Ssl    Jan08    0:18    23:50:22    /laforge.bin    <noArgs>
xrdp    877    0.0    0.0    15652    2512    ?    S    Jan08    0:00    23:50:22    /usr/sbin/xrdp    <noArgs>
root    879    0.0    1.2    915132    104396    tty7    Ssl+    Jan08    0:02    23:50:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    880    0.0    0.0    8124    2492    tty1    Ss+    Jan08    0:00    23:50:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    902    0.0    0.1    169620    8196    ?    Sl    Jan08    0:00    23:50:21    lightdm    --session-child_17_20
root    907    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:21    [psimon]    <noArgs>
lightdm    909    0.0    0.1    22456    12936    ?    Ss    Jan08    0:00    23:50:21    /usr/lib/systemd/systemd    --user
lightdm    912    0.0    0.0    22712    3828    ?    S    Jan08    0:00    23:50:21    (sd-pam)    <noArgs>
lightdm    944    0.0    0.0    8348    4692    ?    Ss    Jan08    0:00    23:50:21    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    945    0.0    0.1    101208    10812    ?    S<sl    Jan08    0:00    23:50:21    /usr/bin/pipewire    <noArgs>
lightdm    946    0.0    1.2    666648    105712    ?    Ssl    Jan08    0:15    23:50:21    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    948    0.0    0.1    479276    15968    ?    S<sl    Jan08    0:00    23:50:21    /usr/bin/wireplumber    <noArgs>
lightdm    949    0.0    0.0    84704    5220    ?    Ssl    Jan08    0:00    23:50:21    /usr/bin/pipewire    -c_filter-chain.conf
rtkit    950    0.0    0.0    21492    3104    ?    SNsl    Jan08    0:00    23:50:21    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    951    0.0    0.1    98776    8220    ?    S<sl    Jan08    0:00    23:50:21    /usr/bin/pipewire-pulse    <noArgs>
lightdm    975    0.0    0.0    381080    7288    ?    Ssl    Jan08    0:00    23:50:21    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    989    0.0    0.0    8208    4452    ?    S    Jan08    0:00    23:50:21    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_13_--address=unix:path=/run/user/123/at-spi/bus
lightdm    998    0.0    0.0    312816    7908    ?    Ssl    Jan08    0:00    23:50:21    /usr/libexec/gvfsd    <noArgs>
lightdm    1009    0.0    0.0    398408    7368    ?    Sl    Jan08    0:00    23:50:21    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1033    0.0    0.0    14372    5744    ?    S    Jan08    0:00    23:50:20    lightdm    --session-child_13_20
lightdm    1035    0.0    0.0    168772    7208    ?    Sl    Jan08    0:00    23:50:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1062    0.2    1.8    375728    148992    ?    Sl    Jan08    3:12    23:50:19    splunkd    -p_8089_start
root    1065    0.0    0.2    135648    17900    ?    Ss    Jan08    0:03    23:50:19    [splunkd    pid=1062]_splunkd_-p_8089_start_[process-runner]
root    1899    0.0    0.0    2688    1748    ?    S    Jan08    0:00    23:49:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1900    0.1    10.6    1414160    868808    ?    Sl    Jan08    1:33    23:49:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    21807    0.0    0.0    0    0    ?    I    Jan08    0:00    21:44:44    [kworker/u18:0-flush-254:0]    <noArgs>
root    42686    0.0    0.0    0    0    ?    I    Jan08    0:00    19:33:29    [kworker/u20:3-flush-254:0]    <noArgs>
root    92888    0.0    0.0    0    0    ?    I    Jan08    0:02    14:17:30    [kworker/3:2-events]    <noArgs>
root    141922    0.0    0.0    0    0    ?    I    00:45    0:00    09:09:17    [kworker/u17:2-flush-254:0]    <noArgs>
root    142063    0.0    0.0    0    0    ?    I    00:46    0:00    09:07:49    [kworker/u18:1-flush-254:0]    <noArgs>
root    155568    0.0    0.0    0    0    ?    I    02:09    0:00    07:44:53    [kworker/u17:1-flush-254:0]    <noArgs>
root    161323    0.0    0.0    0    0    ?    I    02:48    0:00    07:06:07    [kworker/u19:2-ext4-rsv-conversion]    <noArgs>
root    164434    0.0    0.0    0    0    ?    I    03:04    0:00    06:49:36    [kworker/u19:0-writeback]    <noArgs>
root    170757    0.0    0.0    0    0    ?    I    03:46    0:00    06:07:31    [kworker/u18:2-events_unbound]    <noArgs>
root    178726    0.0    0.0    0    0    ?    I    04:34    0:00    05:19:35    [kworker/u17:0-ext4-rsv-conversion]    <noArgs>
root    198050    0.0    0.0    0    0    ?    I    06:35    0:00    03:18:51    [kworker/u20:2-flush-254:0]    <noArgs>
root    214023    0.0    0.0    0    0    ?    I    08:17    0:00    01:36:51    [kworker/u20:0-kvfree_rcu_reclaim]    <noArgs>
root    225063    0.0    0.0    0    0    ?    I    09:25    0:00    28:51    [kworker/u19:1-events_unbound]    <noArgs>
root    227752    0.0    0.0    0    0    ?    I    09:44    0:00    10:15    [kworker/3:1-ata_sff]    <noArgs>
root    227753    0.0    0.0    0    0    ?    I    09:44    0:00    10:13    [kworker/0:0-ata_sff]    <noArgs>
root    228080    0.0    0.0    0    0    ?    I    09:45    0:00    09:08    [kworker/1:0-ata_sff]    <noArgs>
root    228426    0.0    0.0    0    0    ?    I    09:49    0:00    05:18    [kworker/2:2-events]    <noArgs>
root    228694    0.0    0.0    0    0    ?    I    09:49    0:00    05:02    [kworker/3:0-ata_sff]    <noArgs>
root    228991    0.0    0.0    0    0    ?    I    09:49    0:00    04:36    [kworker/0:1-ata_sff]    <noArgs>
root    229074    0.0    0.0    0    0    ?    I    09:50    0:00    03:56    [kworker/1:1-ata_sff]    <noArgs>
xrdp    229271    11.1    0.4    61864    38544    ?    S    09:52    0:12    01:52    /usr/sbin/xrdp    <noArgs>
root    229305    0.0    0.0    18320    4396    ?    S    09:52    0:00    01:25    /usr/sbin/xrdp-sesman    <noArgs>
pentester    229308    0.1    0.1    23072    13352    ?    Ss    09:52    0:00    01:25    /usr/lib/systemd/systemd    --user
pentester    229310    0.0    0.0    22592    3856    ?    S    09:52    0:00    01:25    (sd-pam)    <noArgs>
pentester    229330    0.2    0.0    8892    5648    ?    Ss    09:52    0:00    01:25    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
pentester    229331    0.0    0.0    97360    8048    ?    Ssl    09:52    0:00    01:25    /usr/bin/pipewire    <noArgs>
pentester    229332    0.3    1.2    630548    98096    ?    Sl    09:52    0:00    01:25    xfce4-session    <noArgs>
pentester    229333    3.6    2.0    425968    170424    ?    Sl    09:52    0:03    01:25    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    229336    0.0    0.0    7212    3548    ?    Ss    09:52    0:00    01:25    /usr/bin/mpris-proxy    <noArgs>
pentester    229337    0.0    0.1    399540    14260    ?    Ssl    09:52    0:00    01:25    /usr/bin/wireplumber    <noArgs>
pentester    229338    0.0    0.0    84704    5340    ?    Ssl    09:52    0:00    01:25    /usr/bin/pipewire    -c_filter-chain.conf
pentester    229340    0.0    0.1    99176    8884    ?    Ssl    09:52    0:00    01:25    /usr/bin/pipewire-pulse    <noArgs>
pentester    229362    0.0    0.0    95084    6176    ?    Sl    09:52    0:00    01:25    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    229439    0.0    0.0    10688    1864    ?    Ss    09:52    0:00    01:24    /usr/bin/ssh-agent    x-session-manager
pentester    229450    0.0    0.0    381172    7732    ?    Ssl    09:52    0:00    01:24    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    229457    0.0    0.0    8344    4896    ?    S    09:52    0:00    01:24    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    229461    0.1    0.0    307776    6696    ?    Ssl    09:52    0:00    01:24    /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd    <noArgs>
pentester    229468    0.0    0.0    168784    7808    ?    Sl    09:52    0:00    01:24    /usr/libexec/at-spi2-registryd    --use-gnome-session
pentester    229481    0.0    0.0    155488    3748    ?    SLsl    09:52    0:00    01:24    /usr/bin/gpg-agent    --supervised
pentester    229484    0.9    0.5    297312    48440    ?    Sl    09:52    0:00    01:24    xfwm4    <noArgs>
pentester    229489    0.0    0.0    312816    8052    ?    Ssl    09:52    0:00    01:24    /usr/libexec/gvfsd    <noArgs>
pentester    229495    0.0    0.0    398408    7484    ?    Sl    09:52    0:00    01:24    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    229504    0.1    0.3    348404    26844    ?    Sl    09:52    0:00    01:24    xfsettingsd    <noArgs>
pentester    229510    0.0    0.0    165276    5968    ?    Ssl    09:52    0:00    01:24    /usr/libexec/dconf-service    <noArgs>
pentester    229511    0.6    0.5    506316    43760    ?    Sl    09:52    0:00    01:24    xfce4-panel    <noArgs>
pentester    229520    0.0    0.3    420204    26268    ?    Sl    09:52    0:00    01:24    Thunar    --daemon
pentester    229533    0.6    0.8    663288    69624    ?    Sl    09:52    0:00    01:23    xfdesktop    <noArgs>
pentester    229538    0.5    0.5    429320    45112    ?    Sl    09:52    0:00    01:23    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_14680071_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    229543    0.0    0.0    7180    3380    ?    S    09:52    0:00    01:23    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    229548    0.0    0.2    405608    19680    ?    Sl    09:52    0:00    01:23    xfce4-power-manager    <noArgs>
pentester    229550    0.1    0.4    281552    35480    ?    Sl    09:52    0:00    01:23    xfce4-screensaver    <noArgs>
pentester    229555    0.0    0.3    593372    26968    ?    Sl    09:52    0:00    01:23    diodon    <noArgs>
pentester    229559    0.4    0.7    604468    61604    ?    Sl    09:52    0:00    01:23    /usr/bin/python3    /usr/bin/blueman-applet
pentester    229560    0.0    0.0    12432    2320    ?    Ssl    09:52    0:00    01:23    xcape    -e_Super_L_Control_L_Escape
pentester    229563    0.1    0.5    66232    41000    ?    S    09:52    0:00    01:23    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pentester    229571    0.0    0.2    265304    18280    ?    Sl    09:52    0:00    01:23    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    229580    0.0    0.2    481796    21860    ?    Ssl    09:53    0:00    01:23    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    229589    0.0    0.0    308560    6592    ?    Sl    09:53    0:00    01:23    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    229591    0.0    0.1    857076    8932    ?    Sl    09:53    0:00    01:23    xiccd    <noArgs>
pentester    229619    0.1    0.5    586932    43112    ?    Sl    09:53    0:00    01:23    nm-applet    <noArgs>
pentester    229620    0.1    0.3    282396    28136    ?    SNsl    09:53    0:00    01:23    /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd    <noArgs>
colord    229629    0.1    0.1    317060    15220    ?    Ssl    09:53    0:00    01:23    /usr/libexec/colord    <noArgs>
pentester    229685    0.0    0.0    95896    7612    ?    Sl    09:53    0:00    01:23    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
pentester    229705    0.0    0.1    457848    8932    ?    Ssl    09:53    0:00    01:23    /usr/bin/zeitgeist-daemon    <noArgs>
root    229721    0.0    0.1    318516    9912    ?    Ssl    09:53    0:00    01:23    /usr/libexec/upowerd    <noArgs>
pentester    229739    0.4    0.7    310940    61656    ?    Sl    09:53    0:00    01:23    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_14680076_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    229740    0.1    0.4    499532    37880    ?    Sl    09:53    0:00    01:23    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_14680077_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    229741    0.2    0.3    272796    29104    ?    Sl    09:53    0:00    01:23    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_14680078_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    229742    0.1    0.4    359160    39044    ?    Sl    09:53    0:00    01:23    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_14680079_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    229744    0.1    0.4    425196    37372    ?    Sl    09:53    0:00    01:23    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_14680080_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    229745    0.1    0.4    286068    37316    ?    Sl    09:53    0:00    01:23    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_14680081_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    229769    0.1    0.4    425472    37508    ?    Sl    09:53    0:00    01:23    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_14680082_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    229818    0.0    0.1    349660    13072    ?    Ssl    09:53    0:00    01:22    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    229861    0.0    0.1    538328    11688    ?    Ssl    09:53    0:00    01:21    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
root    229865    0.0    0.1    478372    14176    ?    Ssl    09:53    0:00    01:21    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    229877    0.0    0.0    307864    6484    ?    Ssl    09:53    0:00    01:21    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    229882    0.0    0.0    308884    7004    ?    Ssl    09:53    0:00    01:21    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    229887    0.0    0.0    307916    6856    ?    Ssl    09:53    0:00    01:21    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    229897    0.0    0.1    389944    8796    ?    Ssl    09:53    0:00    01:21    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    229914    0.0    0.0    168904    6668    ?    Ssl    09:53    0:00    01:21    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    229918    0.0    0.1    534256    9176    ?    Sl    09:53    0:00    01:21    /usr/libexec/gvfsd-trash    --spawner_:1.21_/org/gtk/gvfs/exec_spaw/0
pentester    229938    26.1    5.5    3124052    453936    ?    Sl    09:53    0:20    01:19    /usr/lib/firefox-esr/firefox-esr    <noArgs>
pentester    229951    0.0    0.0    20868    3084    ?    Sl    09:53    0:00    01:19    /usr/lib/firefox-esr/crashhelper    229938_9_/tmp/_11
pentester    229991    0.0    0.2    557248    20016    ?    Ssl    09:53    0:00    01:19    /usr/libexec/xdg-desktop-portal    <noArgs>
pentester    230001    0.0    0.0    308740    6548    ?    Ssl    09:53    0:00    01:19    /usr/libexec/xdg-permission-store    <noArgs>
pentester    230008    0.0    0.0    539704    7164    ?    Ssl    09:53    0:00    01:19    /usr/libexec/xdg-document-portal    <noArgs>
root    230014    0.0    0.0    2592    2036    ?    Ss    09:53    0:00    01:19    fusermount3    -o_rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal_--_/run/user/1001/doc
pentester    230019    0.0    0.2    479576    19652    ?    Ssl    09:53    0:00    01:19    /usr/libexec/xdg-desktop-portal-gtk    <noArgs>
pentester    230047    0.0    0.5    235304    43192    ?    Sl    09:53    0:00    01:18    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:26899_-prefMapHandle_1:268701_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{2b64c0c9-34ec-4d23-a0ea-a30f69c4b530}_-parentPid_229938_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_1_socket
pentester    230084    0.5    1.2    2467224    102784    ?    Sl    09:53    0:00    01:18    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:27829_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{cf4975c8-2b83-4dc2-ac86-6cd8c9e4b341}_-parentPid_229938_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_2_tab
pentester    230090    0.1    0.6    373104    50036    ?    Sl    09:53    0:00    01:18    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:27874_-prefMapHandle_1:268701_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{361e12a7-c048-408a-b7cd-ffd6b88fda44}_-parentPid_229938_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_3_rdd
pentester    230189    0.0    0.5    233432    42268    ?    Sl    09:53    0:00    01:16    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-sandboxingKind_0_-prefsHandle_0:39302_-prefMapHandle_1:268701_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{e651d090-28bd-460e-ab8b-a82bf21330fc}_-parentPid_229938_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_5_utility
pentester    230204    7.2    2.7    2612420    225616    ?    Sl    09:53    0:05    01:16    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:37829_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{13270813-1962-4ee8-aa40-850331472e4d}_-parentPid_229938_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_7_tab
pentester    230218    0.1    0.9    2429912    80680    ?    Sl    09:53    0:00    01:16    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:37829_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{fccf30df-b736-4091-bfbb-556f499f19fb}_-parentPid_229938_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_8_tab
pentester    230254    0.6    1.6    2493708    135704    ?    Sl    09:53    0:00    01:16    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:39740_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{7f627081-661d-4fc1-89d3-211681bfa7d7}_-parentPid_229938_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_9_tab
xrdp    230345    0.0    0.1    47868    12276    ?    S    09:53    0:00    01:13    /usr/sbin/xrdp    <noArgs>
pentester    230520    0.1    0.9    2430540    80576    ?    Sl    09:53    0:00    01:00    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:38338_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{83bb0326-2836-4df1-affe-96925141c7e8}_-parentPid_229938_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_10_tab
pentester    230580    0.1    0.9    2430540    80692    ?    Sl    09:53    0:00    00:58    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:38338_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{201e1f54-5f7d-435d-8cbb-394ee617f189}_-parentPid_229938_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_11_tab
pentester    230915    1.0    0.8    808048    70520    ?    Sl    09:53    0:00    00:31    /usr/bin/qterminal    <noArgs>
pentester    230922    3.7    0.0    14028    7688    pts/0    Ss+    09:53    0:01    00:31    /usr/bin/zsh    <noArgs>
pentester    231430    0.0    0.0    5588    2140    ?    S    09:54    0:00    00:03    sleep    10
root    231511    0.0    0.0    2688    1788    ?    S    09:54    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    231512    0.0    0.0    2688    1836    ?    S    09:54    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    231533    0.0    0.0    9504    4272    ?    R    09:54    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    231534    0.0    0.0    5592    1956    ?    S    09:54    0:00    00:00    tee    /dev/null
root    231535    0.0    0.0    9472    3948    ?    S    09:54    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}

_sourcetype: ps

source: ps

sourcetype: ps


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24656    14936    ?    Ss    Jan08    0:02    23:50:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:05    23:50:34    [kworker/0:1-events]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:50:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/2]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:50:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:34    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:34    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:04    23:50:34    [kworker/3:1-events]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/3:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    I    Jan08    0:05    23:50:34    [kworker/1:1-events]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/2:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u25:0]    <noArgs>
root    203    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/1:1H-kblockd]    <noArgs>
root    209    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/0:1H-kblockd]    <noArgs>
root    251    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-ata_sff]    <noArgs>
root    256    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [scsi_eh_0]    <noArgs>
root    257    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-scsi_tmf_0]    <noArgs>
root    261    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [scsi_eh_1]    <noArgs>
root    263    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-scsi_tmf_1]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:50:32    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    330    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [hwrng]    <noArgs>
root    385    0.0    0.3    50356    24832    ?    Ss    Jan08    0:00    23:50:31    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:50:31    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    420    0.0    0.1    37588    12068    ?    Ss    Jan08    0:00    23:50:31    /usr/lib/systemd/systemd-udevd    <noArgs>
root    429    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:30    [psimon]    <noArgs>
root    565    0.0    0.0    8388    6628    ?    Ss    Jan08    0:01    23:50:30    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    609    0.0    0.0    10536    4512    ?    S    Jan08    0:00    23:50:29    dhcpcd:    eth0_[ip4]_[ip6]
root    610    0.0    0.0    10540    2508    ?    S    Jan08    0:00    23:50:29    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    611    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:50:29    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    612    0.0    0.0    10516    2116    ?    S    Jan08    0:00    23:50:29    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    614    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/R-rpciod]    <noArgs>
root    615    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/R-xprtiod]    <noArgs>
root    620    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    630    0.0    0.0    10540    2252    ?    S    Jan08    0:00    23:50:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.205
dhcpcd    631    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:50:27    dhcpcd:    [DHCP6_proxy]_fe80::bdd7:7468:175c:deae
dhcpcd    650    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:50:22    dhcpcd:    [BOOTP_proxy]_10.0.254.205
root    743    0.0    0.0    309036    7156    ?    Ssl    Jan08    0:00    23:50:22    /usr/libexec/accounts-daemon    <noArgs>
root    745    0.0    0.0    6876    2752    ?    Ss    Jan08    0:00    23:50:22    /usr/sbin/cron    -f
messagebus    746    0.0    0.0    9944    6508    ?    Ss    Jan08    0:00    23:50:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    749    0.0    0.1    382480    9928    ?    Ssl    Jan08    0:01    23:50:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    750    0.0    0.0    80876    3876    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/qemu-ga    <noArgs>
root    753    0.0    0.1    18496    9180    ?    Ss    Jan08    0:00    23:50:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    776    0.0    0.2    336464    18928    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/NetworkManager    --no-daemon
root    813    0.0    0.1    391060    12532    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/ModemManager    <noArgs>
root    832    0.0    0.0    381356    7616    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/lightdm    <noArgs>
root    843    0.0    0.0    18320    4352    ?    S    Jan08    0:00    23:50:22    /usr/sbin/xrdp-sesman    <noArgs>
root    857    0.0    0.2    1905076    20296    ?    Ssl    Jan08    0:20    23:50:22    /laforge.bin    <noArgs>
xrdp    874    0.0    0.0    15652    2508    ?    S    Jan08    0:00    23:50:22    /usr/sbin/xrdp    <noArgs>
root    879    0.0    1.3    915132    107396    tty7    Ssl+    Jan08    0:02    23:50:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    881    0.0    0.0    8124    2668    tty1    Ss+    Jan08    0:00    23:50:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    903    0.0    0.1    169616    8312    ?    Sl    Jan08    0:00    23:50:21    lightdm    --session-child_17_20
root    908    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:20    [psimon]    <noArgs>
lightdm    911    0.0    0.1    22880    13072    ?    Ss    Jan08    0:00    23:50:20    /usr/lib/systemd/systemd    --user
lightdm    914    0.0    0.0    22712    3840    ?    S    Jan08    0:00    23:50:20    (sd-pam)    <noArgs>
root    924    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:20    [kworker/2:2H-kblockd]    <noArgs>
lightdm    942    0.0    0.0    8348    4724    ?    Ss    Jan08    0:00    23:50:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    943    0.0    0.1    101208    10864    ?    S<sl    Jan08    0:00    23:50:20    /usr/bin/pipewire    <noArgs>
lightdm    944    0.0    1.2    666648    105472    ?    Ssl    Jan08    0:17    23:50:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    948    0.0    0.0    21492    3104    ?    SNsl    Jan08    0:00    23:50:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    949    0.0    0.1    479272    16076    ?    S<sl    Jan08    0:00    23:50:20    /usr/bin/wireplumber    <noArgs>
lightdm    950    0.0    0.0    84704    5224    ?    Ssl    Jan08    0:00    23:50:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    951    0.0    0.1    98776    8272    ?    S<sl    Jan08    0:00    23:50:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    977    0.0    0.0    381080    7020    ?    Ssl    Jan08    0:00    23:50:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    984    0.0    0.0    8208    4352    ?    S    Jan08    0:00    23:50:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    990    0.0    0.0    312816    7928    ?    Ssl    Jan08    0:00    23:50:20    /usr/libexec/gvfsd    <noArgs>
lightdm    1005    0.0    0.0    398408    7432    ?    Sl    Jan08    0:00    23:50:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1037    0.0    0.0    14372    5720    ?    S    Jan08    0:00    23:50:20    lightdm    --session-child_13_20
lightdm    1040    0.0    0.0    168772    7096    ?    Sl    Jan08    0:00    23:50:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1065    0.2    1.8    379824    151128    ?    Sl    Jan08    3:38    23:50:19    splunkd    -p_8089_start
root    1068    0.0    0.2    135648    17888    ?    Ss    Jan08    0:04    23:50:19    [splunkd    pid=1065]_splunkd_-p_8089_start_[process-runner]
root    1902    0.0    0.0    2688    1748    ?    S    Jan08    0:00    23:49:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1903    0.1    10.4    1414160    847124    ?    Sl    Jan08    1:55    23:49:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    73681    0.0    0.0    0    0    ?    I    Jan08    0:00    16:18:38    [kworker/u20:2-ext4-rsv-conversion]    <noArgs>
root    75060    0.0    0.0    0    0    ?    I    Jan08    0:00    16:08:44    [kworker/u17:0-flush-254:0]    <noArgs>
root    83119    0.0    0.0    0    0    ?    I    Jan08    0:00    15:19:35    [kworker/u18:0-flush-254:0]    <noArgs>
root    117003    0.0    0.0    0    0    ?    I    Jan08    0:02    11:46:44    [kworker/2:2-mm_percpu_wq]    <noArgs>
root    163062    0.0    0.0    0    0    ?    I    02:58    0:00    06:55:42    [kworker/u17:2-kvfree_rcu_reclaim]    <noArgs>
root    166954    0.0    0.0    0    0    ?    I    03:20    0:00    06:33:59    [kworker/u18:2-flush-254:0]    <noArgs>
root    169254    0.0    0.0    0    0    ?    I    03:35    0:00    06:19:13    [kworker/u19:0-flush-254:0]    <noArgs>
root    194301    0.0    0.0    0    0    ?    I    06:13    0:00    03:40:58    [kworker/u18:1-flush-254:0]    <noArgs>
root    196583    0.0    0.0    0    0    ?    I    06:27    0:00    03:26:36    [kworker/u19:1-kvfree_rcu_reclaim]    <noArgs>
root    197941    0.0    0.0    0    0    ?    I    06:34    0:00    03:19:33    [kworker/u19:2-kvfree_rcu_reclaim]    <noArgs>
root    212336    0.0    0.0    0    0    ?    I    08:04    0:00    01:49:34    [kworker/u17:1-events_unbound]    <noArgs>
root    216447    0.0    0.0    0    0    ?    I    08:33    0:00    01:20:33    [kworker/u20:1-flush-254:0]    <noArgs>
root    228014    0.0    0.0    0    0    ?    I    09:44    0:00    09:42    [kworker/2:1-ata_sff]    <noArgs>
root    228109    0.0    0.0    0    0    ?    I    09:45    0:00    08:46    [kworker/u20:0]    <noArgs>
root    228320    0.0    0.0    0    0    ?    I    09:47    0:00    06:26    [kworker/0:0-ata_sff]    <noArgs>
root    228396    0.0    0.0    0    0    ?    I    09:48    0:00    05:40    [kworker/3:0-ata_sff]    <noArgs>
root    228412    0.0    0.0    0    0    ?    I    09:48    0:00    05:22    [kworker/1:2-ata_sff]    <noArgs>
root    229042    0.0    0.0    0    0    ?    I    09:49    0:00    04:21    [kworker/2:0-ata_sff]    <noArgs>
xrdp    229180    0.9    0.4    62084    35180    ?    S    09:51    0:01    02:46    /usr/sbin/xrdp    <noArgs>
root    229231    0.0    0.0    18320    4428    ?    S    09:52    0:00    02:16    /usr/sbin/xrdp-sesman    <noArgs>
pentester    229234    0.1    0.1    22904    13244    ?    Ss    09:52    0:00    02:16    /usr/lib/systemd/systemd    --user
pentester    229236    0.0    0.0    22592    3840    ?    S    09:52    0:00    02:16    (sd-pam)    <noArgs>
pentester    229256    0.1    0.0    8896    5664    ?    Ss    09:52    0:00    02:16    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
pentester    229257    0.0    0.0    97360    7912    ?    Ssl    09:52    0:00    02:16    /usr/bin/pipewire    <noArgs>
pentester    229258    0.2    1.2    630544    98056    ?    Sl    09:52    0:00    02:16    xfce4-session    <noArgs>
pentester    229259    0.7    1.6    389280    138048    ?    Sl    09:52    0:01    02:16    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    229262    0.0    0.0    7212    3544    ?    Ss    09:52    0:00    02:16    /usr/bin/mpris-proxy    <noArgs>
pentester    229263    0.0    0.1    399584    14316    ?    Ssl    09:52    0:00    02:16    /usr/bin/wireplumber    <noArgs>
pentester    229264    0.0    0.0    84704    5280    ?    Ssl    09:52    0:00    02:16    /usr/bin/pipewire    -c_filter-chain.conf
pentester    229266    0.0    0.1    99176    8864    ?    Ssl    09:52    0:00    02:16    /usr/bin/pipewire-pulse    <noArgs>
pentester    229288    0.0    0.0    96396    7548    ?    Sl    09:52    0:00    02:15    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    229365    0.0    0.0    10688    1864    ?    Ss    09:52    0:00    02:15    /usr/bin/ssh-agent    x-session-manager
pentester    229376    0.0    0.0    381172    7700    ?    Ssl    09:52    0:00    02:15    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    229383    0.0    0.0    8344    4940    ?    S    09:52    0:00    02:15    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    229387    0.1    0.0    307776    6716    ?    Ssl    09:52    0:00    02:15    /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd    <noArgs>
pentester    229394    0.0    0.0    168784    7524    ?    Sl    09:52    0:00    02:15    /usr/libexec/at-spi2-registryd    --use-gnome-session
pentester    229407    0.0    0.0    155488    3608    ?    SLsl    09:52    0:00    02:15    /usr/bin/gpg-agent    --supervised
pentester    229410    0.4    0.5    297308    48632    ?    Sl    09:52    0:00    02:15    xfwm4    <noArgs>
pentester    229415    0.0    0.1    312816    8152    ?    Ssl    09:52    0:00    02:15    /usr/libexec/gvfsd    <noArgs>
pentester    229421    0.0    0.0    398408    7372    ?    Sl    09:52    0:00    02:15    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    229430    0.1    0.3    348404    27296    ?    Sl    09:52    0:00    02:14    xfsettingsd    <noArgs>
pentester    229436    0.0    0.0    165276    5796    ?    Ssl    09:52    0:00    02:14    /usr/libexec/dconf-service    <noArgs>
pentester    229437    0.3    0.6    515536    52976    ?    Sl    09:52    0:00    02:14    xfce4-panel    <noArgs>
pentester    229446    0.0    0.3    485796    26428    ?    Sl    09:52    0:00    02:14    Thunar    --daemon
pentester    229459    0.4    0.8    663292    70092    ?    Sl    09:52    0:00    02:14    xfdesktop    <noArgs>
pentester    229464    0.1    0.5    502032    42800    ?    Sl    09:52    0:00    02:14    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_14680071_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    229469    0.0    0.0    7180    3456    ?    S    09:52    0:00    02:14    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    229474    0.0    0.2    405608    19472    ?    Sl    09:52    0:00    02:14    xfce4-power-manager    <noArgs>
pentester    229477    0.0    0.4    281552    35596    ?    Sl    09:52    0:00    02:14    xfce4-screensaver    <noArgs>
pentester    229483    0.0    0.4    606500    37672    ?    Sl    09:52    0:00    02:14    diodon    <noArgs>
pentester    229485    0.0    0.0    12432    1872    ?    Ssl    09:52    0:00    02:14    xcape    -e_Super_L_Control_L_Escape
pentester    229487    0.2    0.7    604468    61248    ?    Sl    09:52    0:00    02:14    /usr/bin/python3    /usr/bin/blueman-applet
pentester    229489    0.1    0.5    66232    41112    ?    S    09:52    0:00    02:14    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pentester    229497    0.0    0.2    408064    21588    ?    Ssl    09:52    0:00    02:14    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    229504    0.0    0.2    265304    18596    ?    Sl    09:52    0:00    02:14    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    229512    0.0    0.3    282404    27992    ?    SNsl    09:52    0:00    02:14    /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd    <noArgs>
pentester    229521    0.0    0.0    308560    6516    ?    Sl    09:52    0:00    02:14    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    229542    0.0    0.1    857076    9112    ?    Sl    09:52    0:00    02:13    xiccd    <noArgs>
pentester    229559    0.0    0.5    586932    43012    ?    Sl    09:52    0:00    02:13    nm-applet    <noArgs>
colord    229560    0.0    0.1    317060    15116    ?    Ssl    09:52    0:00    02:13    /usr/libexec/colord    <noArgs>
pentester    229595    0.0    0.0    95896    7744    ?    Sl    09:52    0:00    02:13    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
root    229605    0.0    0.1    318520    9924    ?    Ssl    09:52    0:00    02:13    /usr/libexec/upowerd    <noArgs>
pentester    229612    0.0    0.1    457840    8876    ?    Ssl    09:52    0:00    02:13    /usr/bin/zeitgeist-daemon    <noArgs>
pentester    229646    0.0    0.1    349660    13032    ?    Ssl    09:52    0:00    02:13    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    229668    0.2    0.7    310936    61984    ?    Sl    09:52    0:00    02:13    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_14680076_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    229675    0.0    0.4    499484    38112    ?    Sl    09:52    0:00    02:13    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_14680077_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    229676    0.2    0.3    272796    28988    ?    Sl    09:52    0:00    02:13    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_14680078_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    229680    0.0    0.4    359164    39376    ?    Sl    09:52    0:00    02:13    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_14680079_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    229682    0.0    0.4    425196    37220    ?    Sl    09:52    0:00    02:13    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_14680080_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    229685    0.0    0.4    286068    37592    ?    Sl    09:52    0:00    02:13    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_14680081_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    229696    0.0    0.4    425472    37696    ?    Sl    09:52    0:00    02:13    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_14680082_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    229772    0.0    0.1    538332    11784    ?    Ssl    09:52    0:00    02:12    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
root    229776    0.0    0.1    478372    13904    ?    Ssl    09:52    0:00    02:12    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    229788    0.0    0.0    307864    6708    ?    Ssl    09:52    0:00    02:12    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    229793    0.0    0.0    308884    7132    ?    Ssl    09:52    0:00    02:12    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    229798    0.0    0.0    307916    6736    ?    Ssl    09:52    0:00    02:12    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    229803    0.0    0.1    389944    8772    ?    Ssl    09:52    0:00    02:12    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    229817    0.0    0.0    168868    6668    ?    Ssl    09:52    0:00    02:12    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    229821    0.0    0.1    534256    9092    ?    Sl    09:52    0:00    02:12    /usr/libexec/gvfsd-trash    --spawner_:1.21_/org/gtk/gvfs/exec_spaw/0
pentester    230040    0.2    0.7    793732    57408    ?    Sl    09:52    0:00    01:52    /usr/bin/qterminal    <noArgs>
pentester    230042    0.0    0.2    557012    20004    ?    Ssl    09:52    0:00    01:52    /usr/libexec/xdg-desktop-portal    <noArgs>
pentester    230048    0.0    0.0    308740    6520    ?    Ssl    09:52    0:00    01:52    /usr/libexec/xdg-permission-store    <noArgs>
pentester    230057    0.0    0.0    539704    7008    ?    Ssl    09:52    0:00    01:52    /usr/libexec/xdg-document-portal    <noArgs>
root    230063    0.0    0.0    2592    1924    ?    Ss    09:52    0:00    01:52    fusermount3    -o_rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal_--_/run/user/1001/doc
pentester    230066    0.0    0.2    479576    19756    ?    Ssl    09:52    0:00    01:52    /usr/libexec/xdg-desktop-portal-gtk    <noArgs>
pentester    230078    0.6    0.0    10500    6484    pts/0    Ss+    09:52    0:00    01:52    /usr/bin/zsh    <noArgs>
root    230501    0.0    0.0    0    0    ?    I    09:53    0:00    01:14    [kworker/0:2-ata_sff]    <noArgs>
root    231033    0.0    0.0    0    0    ?    I    09:53    0:00    00:21    [kworker/3:2-ata_sff]    <noArgs>
pentester    231280    0.0    0.0    5588    1996    ?    S    09:54    0:00    00:04    sleep    10
root    231355    0.0    0.0    2688    1832    ?    S    09:54    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    231356    0.0    0.0    2688    1832    ?    S    09:54    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    231377    0.0    0.0    9504    4252    ?    R    09:54    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    231378    0.0    0.0    5592    2016    ?    S    09:54    0:00    00:00    tee    /dev/null
root    231379    0.0    0.0    9472    3944    ?    S    09:54    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}