_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24700    14916    ?    Ss    Jan08    0:02    23:55:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:04    23:55:34    [kworker/0:1-events]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:55:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:34    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:34    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:34    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:55:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:55:34    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:55:34    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:34    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-edac-poller]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/3:1H-kblockd]    <noArgs>
root    73    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-mld]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/u25:0]    <noArgs>
root    173    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/2:1H-kblockd]    <noArgs>
root    201    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/1:1H-kblockd]    <noArgs>
root    203    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/0:1H-kblockd]    <noArgs>
root    244    0.0    0.0    0    0    ?    I    Jan08    0:04    23:55:32    [kworker/1:2-mm_percpu_wq]    <noArgs>
root    252    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-ata_sff]    <noArgs>
root    259    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [scsi_eh_0]    <noArgs>
root    260    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    261    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [scsi_eh_1]    <noArgs>
root    262    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    302    0.0    0.0    0    0    ?    I    Jan08    0:04    23:55:32    [kworker/2:2-mm_percpu_wq]    <noArgs>
root    303    0.0    0.0    0    0    ?    S    Jan08    0:01    23:55:31    [jbd2/vda1-8]    <noArgs>
root    304    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    328    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [hwrng]    <noArgs>
root    382    0.0    0.3    58552    24668    ?    Ss    Jan08    0:00    23:55:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    396    0.0    0.0    90112    7416    ?    Ssl    Jan08    0:00    23:55:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    418    0.0    0.1    37452    12100    ?    Ss    Jan08    0:00    23:55:30    /usr/lib/systemd/systemd-udevd    <noArgs>
root    426    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:30    [psimon]    <noArgs>
root    554    0.0    0.0    8388    5224    ?    Ss    Jan08    0:01    23:55:29    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    605    0.0    0.0    10536    4524    ?    S    Jan08    0:00    23:55:29    dhcpcd:    eth0_[ip4]_[ip6]
root    606    0.0    0.0    10540    2504    ?    S    Jan08    0:00    23:55:29    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    607    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:55:29    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    608    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:55:29    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    610    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:29    [kworker/R-rpciod]    <noArgs>
root    611    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:29    [kworker/R-xprtiod]    <noArgs>
root    616    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    626    0.0    0.0    10540    2248    ?    S    Jan08    0:00    23:55:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.204
dhcpcd    627    0.0    0.0    10540    2376    ?    S    Jan08    0:00    23:55:28    dhcpcd:    [DHCP6_proxy]_fe80::40b9:b017:7606:f729
dhcpcd    646    0.0    0.0    10540    2376    ?    S    Jan08    0:00    23:55:22    dhcpcd:    [BOOTP_proxy]_10.0.254.204
root    739    0.0    0.0    309036    7248    ?    Ssl    Jan08    0:00    23:55:22    /usr/libexec/accounts-daemon    <noArgs>
root    741    0.0    0.0    6876    2752    ?    Ss    Jan08    0:00    23:55:22    /usr/sbin/cron    -f
messagebus    742    0.0    0.0    10072    6464    ?    Ss    Jan08    0:00    23:55:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    744    0.0    0.1    382480    9992    ?    Ssl    Jan08    0:01    23:55:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    746    0.0    0.0    80876    3936    ?    Ssl    Jan08    0:00    23:55:22    /usr/sbin/qemu-ga    <noArgs>
root    750    0.0    0.1    18480    9148    ?    Ss    Jan08    0:00    23:55:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    772    0.0    0.2    336476    19128    ?    Ssl    Jan08    0:00    23:55:22    /usr/sbin/NetworkManager    --no-daemon
root    809    0.0    0.1    391060    12340    ?    Ssl    Jan08    0:00    23:55:22    /usr/sbin/ModemManager    <noArgs>
root    838    0.0    0.0    381356    7764    ?    Ssl    Jan08    0:00    23:55:22    /usr/sbin/lightdm    <noArgs>
root    841    0.0    0.0    18320    4312    ?    S    Jan08    0:00    23:55:22    /usr/sbin/xrdp-sesman    <noArgs>
root    849    0.0    0.2    1905076    20348    ?    Ssl    Jan08    0:19    23:55:22    /laforge.bin    <noArgs>
xrdp    877    0.0    0.0    15652    2372    ?    S    Jan08    0:00    23:55:22    /usr/sbin/xrdp    <noArgs>
root    878    0.0    1.3    915132    107496    tty7    Ssl+    Jan08    0:02    23:55:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    880    0.0    0.0    8124    2520    tty1    Ss+    Jan08    0:00    23:55:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    900    0.0    0.1    169616    8200    ?    Sl    Jan08    0:00    23:55:21    lightdm    --session-child_17_20
lightdm    907    0.0    0.1    22880    13028    ?    Ss    Jan08    0:00    23:55:21    /usr/lib/systemd/systemd    --user
root    909    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:20    [psimon]    <noArgs>
lightdm    911    0.0    0.0    22712    3860    ?    S    Jan08    0:00    23:55:20    (sd-pam)    <noArgs>
lightdm    934    0.0    0.0    8348    4692    ?    Ss    Jan08    0:00    23:55:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    935    0.0    0.1    101208    10752    ?    S<sl    Jan08    0:00    23:55:20    /usr/bin/pipewire    <noArgs>
lightdm    936    0.0    1.2    666648    105332    ?    Ssl    Jan08    0:17    23:55:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    940    0.0    0.0    21492    3168    ?    SNsl    Jan08    0:00    23:55:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    941    0.0    0.1    479284    15988    ?    S<sl    Jan08    0:00    23:55:20    /usr/bin/wireplumber    <noArgs>
lightdm    942    0.0    0.0    84704    5036    ?    Ssl    Jan08    0:00    23:55:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    943    0.0    0.1    98776    8264    ?    S<sl    Jan08    0:00    23:55:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    968    0.0    0.0    381080    7136    ?    Ssl    Jan08    0:00    23:55:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    979    0.0    0.0    8208    4472    ?    S    Jan08    0:00    23:55:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    982    0.0    0.1    312816    8212    ?    Ssl    Jan08    0:00    23:55:20    /usr/libexec/gvfsd    <noArgs>
lightdm    994    0.0    0.0    398408    7320    ?    Sl    Jan08    0:00    23:55:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1031    0.0    0.0    14372    5784    ?    S    Jan08    0:00    23:55:20    lightdm    --session-child_13_20
lightdm    1033    0.0    0.0    168772    7128    ?    Sl    Jan08    0:00    23:55:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1061    0.2    1.8    377776    151124    ?    Sl    Jan08    3:39    23:55:19    splunkd    -p_8089_start
root    1064    0.0    0.2    135648    17932    ?    Ss    Jan08    0:04    23:55:19    [splunkd    pid=1061]_splunkd_-p_8089_start_[process-runner]
root    1950    0.0    0.0    2688    1792    ?    S    Jan08    0:00    23:54:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1951    0.1    19.7    2135056    1608320    ?    Sl    Jan08    2:06    23:54:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    123801    0.0    0.0    0    0    ?    I    Jan08    0:00    11:09:37    [kworker/u19:0-ext4-rsv-conversion]    <noArgs>
root    126267    0.0    0.0    0    0    ?    I    Jan08    0:00    10:54:37    [kworker/u20:0-kvfree_rcu_reclaim]    <noArgs>
root    169346    0.0    0.0    0    0    ?    I    03:36    0:00    06:23:58    [kworker/u19:1-flush-254:0]    <noArgs>
root    179798    0.0    0.0    0    0    ?    I    04:43    0:00    05:17:16    [kworker/u18:0-flush-254:0]    <noArgs>
root    182038    0.0    0.0    0    0    ?    I    04:57    0:00    05:03:12    [kworker/u18:1-flush-254:0]    <noArgs>
root    186154    0.0    0.0    0    0    ?    I    05:21    0:00    04:38:55    [kworker/u19:2-ext4-rsv-conversion]    <noArgs>
root    204491    0.0    0.0    0    0    ?    I    07:18    0:00    02:42:16    [kworker/u17:1-ext4-rsv-conversion]    <noArgs>
root    205465    0.0    0.0    0    0    ?    I    07:22    0:00    02:37:56    [kworker/u18:3-kvfree_rcu_reclaim]    <noArgs>
root    208715    0.0    0.0    0    0    ?    I    07:45    0:00    02:15:43    [kworker/u17:2-flush-254:0]    <noArgs>
root    215759    0.0    0.0    0    0    ?    I    08:28    0:00    01:32:16    [kworker/u17:3-flush-254:0]    <noArgs>
root    218686    0.0    0.0    0    0    ?    I    08:47    0:00    01:13:40    [kworker/u20:1-ext4-rsv-conversion]    <noArgs>
root    220204    0.0    0.0    0    0    ?    I    08:55    0:00    01:04:48    [kworker/3:0-events]    <noArgs>
root    222109    0.0    0.0    0    0    ?    I    09:06    0:00    53:58    [kworker/u20:2]    <noArgs>
xrdp    228405    0.6    0.4    61756    38420    ?    S    09:48    0:04    11:52    /usr/sbin/xrdp    <noArgs>
root    228454    0.0    0.0    18320    4260    ?    S    09:49    0:00    11:23    /usr/sbin/xrdp-sesman    <noArgs>
pentester    228457    0.0    0.1    22916    13248    ?    Ss    09:49    0:00    11:23    /usr/lib/systemd/systemd    --user
pentester    228459    0.0    0.0    22592    3840    ?    S    09:49    0:00    11:23    (sd-pam)    <noArgs>
pentester    228479    0.0    0.0    8884    5616    ?    Ss    09:49    0:00    11:23    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
pentester    228480    0.0    0.1    97360    8136    ?    Ssl    09:49    0:00    11:23    /usr/bin/pipewire    <noArgs>
pentester    228481    0.0    1.2    630552    98152    ?    Sl    09:49    0:00    11:23    xfce4-session    <noArgs>
pentester    228482    0.3    1.6    386980    135576    ?    Sl    09:49    0:02    11:23    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    228485    0.0    0.0    7212    3548    ?    Ss    09:49    0:00    11:23    /usr/bin/mpris-proxy    <noArgs>
pentester    228486    0.0    0.1    399588    14344    ?    Ssl    09:49    0:00    11:23    /usr/bin/wireplumber    <noArgs>
pentester    228487    0.0    0.0    84704    5208    ?    Ssl    09:49    0:00    11:23    /usr/bin/pipewire    -c_filter-chain.conf
pentester    228488    0.0    0.1    99228    8980    ?    Ssl    09:49    0:00    11:23    /usr/bin/pipewire-pulse    <noArgs>
pentester    228511    0.0    0.0    95084    6224    ?    Sl    09:49    0:00    11:22    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    228588    0.0    0.0    10688    1856    ?    Ss    09:49    0:00    11:22    /usr/bin/ssh-agent    x-session-manager
pentester    228599    0.0    0.0    381172    7724    ?    Ssl    09:49    0:00    11:22    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    228606    0.0    0.0    8344    4888    ?    S    09:49    0:00    11:22    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    228617    0.0    0.0    168784    7588    ?    Sl    09:49    0:00    11:22    /usr/libexec/at-spi2-registryd    --use-gnome-session
pentester    228630    0.0    0.0    155488    3800    ?    SLsl    09:49    0:00    11:22    /usr/bin/gpg-agent    --supervised
pentester    228633    0.1    0.6    297312    48820    ?    Sl    09:49    0:01    11:22    xfwm4    <noArgs>
pentester    228638    0.0    0.1    312816    8240    ?    Ssl    09:49    0:00    11:22    /usr/libexec/gvfsd    <noArgs>
pentester    228644    0.0    0.0    398408    7524    ?    Sl    09:49    0:00    11:22    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    228668    0.0    0.3    348408    27608    ?    Sl    09:49    0:00    11:21    xfsettingsd    <noArgs>
pentester    228674    0.0    0.0    165276    6016    ?    Ssl    09:49    0:00    11:21    /usr/libexec/dconf-service    <noArgs>
pentester    228675    0.0    0.6    515208    52656    ?    Sl    09:49    0:00    11:21    xfce4-panel    <noArgs>
pentester    228684    0.0    0.3    420256    26192    ?    Sl    09:49    0:00    11:21    Thunar    --daemon
pentester    228697    0.0    0.8    663280    70172    ?    Sl    09:49    0:00    11:21    xfdesktop    <noArgs>
pentester    228702    0.0    0.5    428304    42620    ?    Sl    09:49    0:00    11:21    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_14680071_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    228707    0.0    0.0    7180    3280    ?    S    09:49    0:00    11:21    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    228712    0.0    0.2    405608    19368    ?    Sl    09:49    0:00    11:21    xfce4-power-manager    <noArgs>
pentester    228716    0.0    0.4    281548    35308    ?    Sl    09:49    0:00    11:21    xfce4-screensaver    <noArgs>
pentester    228719    0.0    0.4    606500    37832    ?    Sl    09:49    0:00    11:21    diodon    <noArgs>
pentester    228725    0.0    0.0    12432    1964    ?    Ssl    09:49    0:00    11:21    xcape    -e_Super_L_Control_L_Escape
pentester    228726    0.0    0.7    604464    61648    ?    Sl    09:49    0:00    11:21    /usr/bin/python3    /usr/bin/blueman-applet
pentester    228728    0.0    0.5    66232    41248    ?    S    09:49    0:00    11:21    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pentester    228734    0.0    0.2    416260    21720    ?    Ssl    09:49    0:00    11:21    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    228756    0.0    0.2    265304    18284    ?    Sl    09:49    0:00    11:21    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    228765    0.0    0.0    308560    6548    ?    Sl    09:49    0:00    11:21    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    228774    0.0    0.1    857076    8952    ?    Sl    09:49    0:00    11:21    xiccd    <noArgs>
pentester    228791    0.0    0.5    586932    43060    ?    Sl    09:49    0:00    11:21    nm-applet    <noArgs>
colord    228808    0.0    0.1    317060    15376    ?    Ssl    09:49    0:00    11:21    /usr/libexec/colord    <noArgs>
pentester    228833    0.0    0.0    95896    7600    ?    Sl    09:49    0:00    11:21    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
root    228840    0.0    0.1    318520    10212    ?    Ssl    09:49    0:00    11:20    /usr/libexec/upowerd    <noArgs>
pentester    228849    0.0    0.1    458424    9844    ?    Ssl    09:49    0:00    11:20    /usr/bin/zeitgeist-daemon    <noArgs>
pentester    228892    0.0    0.2    352764    20320    ?    Ssl    09:49    0:00    11:20    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    228919    0.2    0.7    310940    62696    ?    Sl    09:49    0:01    11:20    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_14680076_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    228920    0.0    0.4    499532    38096    ?    Sl    09:49    0:00    11:20    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_14680077_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    228921    0.2    0.3    272796    28920    ?    Sl    09:49    0:01    11:20    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_14680078_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    228922    0.0    0.4    359160    39412    ?    Sl    09:49    0:00    11:20    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_14680079_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    228925    0.0    0.4    425196    37444    ?    Sl    09:49    0:00    11:20    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_14680080_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    228926    0.0    0.4    286068    37664    ?    Sl    09:49    0:00    11:20    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_14680081_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    228936    0.0    0.4    425472    37548    ?    Sl    09:49    0:00    11:20    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_14680082_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    229010    0.0    0.1    538328    11632    ?    Ssl    09:49    0:00    11:19    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
root    229014    0.0    0.1    478372    13964    ?    Ssl    09:49    0:00    11:19    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    229026    0.0    0.0    307864    6788    ?    Ssl    09:49    0:00    11:19    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    229031    0.0    0.0    308884    7288    ?    Ssl    09:49    0:00    11:19    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    229036    0.0    0.0    307916    6812    ?    Ssl    09:49    0:00    11:19    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    229041    0.0    0.1    389944    8748    ?    Ssl    09:49    0:00    11:19    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    229055    0.0    0.0    168868    6684    ?    Ssl    09:49    0:00    11:19    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    229059    0.0    0.1    534256    9220    ?    Sl    09:49    0:00    11:19    /usr/libexec/gvfsd-trash    --spawner_:1.21_/org/gtk/gvfs/exec_spaw/0
pentester    229122    0.1    0.7    794552    57992    ?    Sl    09:49    0:01    11:14    /usr/bin/qterminal    <noArgs>
pentester    229125    0.0    0.2    557012    19788    ?    Ssl    09:49    0:00    11:14    /usr/libexec/xdg-desktop-portal    <noArgs>
pentester    229134    0.0    0.0    308740    6784    ?    Ssl    09:49    0:00    11:14    /usr/libexec/xdg-permission-store    <noArgs>
pentester    229139    0.0    0.0    539704    7172    ?    Ssl    09:49    0:00    11:14    /usr/libexec/xdg-document-portal    <noArgs>
root    229145    0.0    0.0    2592    1940    ?    Ss    09:49    0:00    11:14    fusermount3    -o_rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal_--_/run/user/1001/doc
pentester    229148    0.0    0.2    479576    19776    ?    Ssl    09:49    0:00    11:14    /usr/libexec/xdg-desktop-portal-gtk    <noArgs>
pentester    229151    0.3    0.0    13968    7820    pts/0    Ss+    09:49    0:02    11:14    /usr/bin/zsh    <noArgs>
root    230658    0.0    0.0    0    0    ?    I    09:51    0:00    09:43    [kworker/1:1-ata_sff]    <noArgs>
root    232974    0.0    0.0    0    0    ?    I    09:54    0:00    05:58    [kworker/0:0-ata_sff]    <noArgs>
root    232991    0.0    0.0    0    0    ?    I    09:54    0:00    05:56    [kworker/2:1-ata_sff]    <noArgs>
root    233219    0.0    0.0    0    0    ?    I    09:55    0:00    05:35    [kworker/3:1-ata_sff]    <noArgs>
root    233543    0.0    0.0    0    0    ?    I<    09:55    0:00    05:08    [kworker/R-tls-strp]    <noArgs>
root    234050    0.0    0.0    0    0    ?    I    09:56    0:00    04:35    [kworker/1:0-ata_sff]    <noArgs>
root    236486    0.0    0.0    0    0    ?    I    10:00    0:00    00:41    [kworker/2:0-ata_sff]    <noArgs>
root    236610    0.0    0.0    0    0    ?    I    10:00    0:00    00:29    [kworker/3:2-ata_sff]    <noArgs>
root    236643    0.0    0.0    0    0    ?    I    10:00    0:00    00:25    [kworker/0:2-ata_sff]    <noArgs>
pentester    237000    0.0    0.0    5588    2080    ?    S    10:00    0:00    00:00    sleep    10
root    237009    0.0    0.0    2688    1784    ?    S    10:00    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    237010    0.0    0.0    2688    1860    ?    S    10:00    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    237031    0.0    0.0    9504    4388    ?    R    10:00    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    237032    0.0    0.0    5592    2004    ?    S    10:00    0:00    00:00    tee    /dev/null
root    237033    0.0    0.0    9472    4032    ?    S    10:00    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24680    15152    ?    Ss    Jan08    0:02    23:55:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:04    23:55:33    [kworker/0:1-mm_percpu_wq]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:55:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [ksoftirqd/2]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/3:0H-events_highpri]    <noArgs>
root    47    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [kdevtmpfs]    <noArgs>
root    48    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-inet_frag_wq]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:32    [rcu_tasks_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:32    [rcu_tasks_rude_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:32    [rcu_tasks_trace_kthread]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [kauditd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [khungtaskd]    <noArgs>
root    54    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [oom_reaper]    <noArgs>
root    56    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-writeback]    <noArgs>
root    58    0.0    0.0    0    0    ?    S    Jan08    0:02    23:55:32    [kcompactd0]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:55:32    [ksmd]    <noArgs>
root    60    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:55:32    [khugepaged]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-kblockd]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-blkcg_punt_bio]    <noArgs>
root    63    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-kintegrityd]    <noArgs>
root    64    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [irq/9-acpi]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-tpm_dev_wq]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-edac-poller]    <noArgs>
root    69    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-devfreq_wq]    <noArgs>
root    72    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/2:1H-kblockd]    <noArgs>
root    73    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-mld]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/1:1H-kblockd]    <noArgs>
root    87    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:32    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    92    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-kstrp]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/u21:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/u22:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/u23:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/u24:0]    <noArgs>
root    102    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/u25:0]    <noArgs>
root    201    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/0:1H-kblockd]    <noArgs>
root    206    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/3:1H-kblockd]    <noArgs>
root    257    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-ata_sff]    <noArgs>
root    258    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [scsi_eh_0]    <noArgs>
root    260    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-scsi_tmf_0]    <noArgs>
root    261    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [scsi_eh_1]    <noArgs>
root    262    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-scsi_tmf_1]    <noArgs>
root    269    0.0    0.0    0    0    ?    I    Jan08    0:03    23:55:31    [kworker/3:2-events]    <noArgs>
root    303    0.0    0.0    0    0    ?    S    Jan08    0:01    23:55:30    [jbd2/vda1-8]    <noArgs>
root    304    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:30    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    328    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:30    [hwrng]    <noArgs>
root    381    0.0    0.3    58548    24824    ?    Ss    Jan08    0:00    23:55:29    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    413    0.0    0.0    90112    7460    ?    Ssl    Jan08    0:00    23:55:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    417    0.0    0.1    37576    12116    ?    Ss    Jan08    0:00    23:55:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    427    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:29    [psimon]    <noArgs>
root    564    0.0    0.0    8388    7652    ?    Ss    Jan08    0:01    23:55:28    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    604    0.0    0.0    10528    4520    ?    S    Jan08    0:00    23:55:28    dhcpcd:    eth0_[ip4]_[ip6]
root    605    0.0    0.0    10532    2500    ?    S    Jan08    0:00    23:55:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    606    0.0    0.0    10516    2104    ?    S    Jan08    0:00    23:55:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    607    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:55:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    609    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:28    [kworker/R-rpciod]    <noArgs>
root    610    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:28    [kworker/R-xprtiod]    <noArgs>
root    615    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:27    [kworker/R-cfg80211]    <noArgs>
dhcpcd    626    0.0    0.0    10532    2244    ?    S    Jan08    0:00    23:55:27    dhcpcd:    [BPF_ARP]_eth0_10.0.254.203
dhcpcd    627    0.0    0.0    10532    2372    ?    S    Jan08    0:00    23:55:26    dhcpcd:    [DHCP6_proxy]_fe80::7e7:d348:2d3a:1121
dhcpcd    646    0.0    0.0    10532    2372    ?    S    Jan08    0:00    23:55:21    dhcpcd:    [BOOTP_proxy]_10.0.254.203
root    739    0.0    0.0    309036    7180    ?    Ssl    Jan08    0:00    23:55:21    /usr/libexec/accounts-daemon    <noArgs>
root    741    0.0    0.0    6876    2732    ?    Ss    Jan08    0:00    23:55:21    /usr/sbin/cron    -f
messagebus    742    0.0    0.0    9976    6516    ?    Ss    Jan08    0:00    23:55:21    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    745    0.0    0.1    382480    10032    ?    Ssl    Jan08    0:01    23:55:21    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    746    0.0    0.0    80876    4044    ?    Ssl    Jan08    0:00    23:55:21    /usr/sbin/qemu-ga    <noArgs>
root    750    0.0    0.1    18352    9112    ?    Ss    Jan08    0:00    23:55:21    /usr/lib/systemd/systemd-logind    <noArgs>
root    792    0.0    0.2    336448    19132    ?    Ssl    Jan08    0:00    23:55:21    /usr/sbin/NetworkManager    --no-daemon
root    807    0.0    0.1    391064    12404    ?    Ssl    Jan08    0:00    23:55:21    /usr/sbin/ModemManager    <noArgs>
root    834    0.0    0.0    381356    7764    ?    Ssl    Jan08    0:00    23:55:21    /usr/sbin/lightdm    <noArgs>
root    837    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:21    [kworker/2:2H-kblockd]    <noArgs>
root    840    0.0    0.0    18320    4284    ?    S    Jan08    0:00    23:55:21    /usr/sbin/xrdp-sesman    <noArgs>
root    847    0.0    0.2    1905076    20644    ?    Ssl    Jan08    0:19    23:55:21    /laforge.bin    <noArgs>
xrdp    871    0.0    0.0    15652    2468    ?    S    Jan08    0:00    23:55:21    /usr/sbin/xrdp    <noArgs>
root    876    0.0    1.3    915128    105868    tty7    Ssl+    Jan08    0:02    23:55:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    880    0.0    0.0    8124    2684    tty1    Ss+    Jan08    0:00    23:55:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    899    0.0    0.0    169620    8048    ?    Sl    Jan08    0:00    23:55:20    lightdm    --session-child_17_20
lightdm    905    0.0    0.1    22880    13080    ?    Ss    Jan08    0:00    23:55:20    /usr/lib/systemd/systemd    --user
root    907    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:20    [psimon]    <noArgs>
lightdm    909    0.0    0.0    22712    3848    ?    S    Jan08    0:00    23:55:19    (sd-pam)    <noArgs>
lightdm    932    0.0    0.0    8348    4696    ?    Ss    Jan08    0:00    23:55:19    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    933    0.0    0.1    101224    10708    ?    S<sl    Jan08    0:00    23:55:19    /usr/bin/pipewire    <noArgs>
lightdm    934    0.0    1.3    666648    105836    ?    Ssl    Jan08    0:16    23:55:19    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    938    0.0    0.0    21492    3168    ?    SNsl    Jan08    0:00    23:55:19    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    939    0.0    0.1    479280    16016    ?    S<sl    Jan08    0:00    23:55:19    /usr/bin/wireplumber    <noArgs>
lightdm    941    0.0    0.0    84704    5212    ?    Ssl    Jan08    0:00    23:55:19    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    942    0.0    0.1    98776    8192    ?    S<sl    Jan08    0:00    23:55:19    /usr/bin/pipewire-pulse    <noArgs>
lightdm    966    0.0    0.0    381080    7276    ?    Ssl    Jan08    0:00    23:55:19    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    975    0.0    0.0    8208    4524    ?    S    Jan08    0:00    23:55:19    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    982    0.0    0.0    312816    7896    ?    Ssl    Jan08    0:00    23:55:19    /usr/libexec/gvfsd    <noArgs>
lightdm    992    0.0    0.0    398408    7404    ?    Sl    Jan08    0:00    23:55:19    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1026    0.0    0.0    14372    5760    ?    S    Jan08    0:00    23:55:19    lightdm    --session-child_13_20
lightdm    1028    0.0    0.0    168772    7200    ?    Sl    Jan08    0:00    23:55:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1059    0.2    1.8    379824    151664    ?    Sl    Jan08    3:39    23:55:18    splunkd    -p_8089_start
root    1062    0.0    0.2    135648    17912    ?    Ss    Jan08    0:04    23:55:18    [splunkd    pid=1059]_splunkd_-p_8089_start_[process-runner]
root    1894    0.0    0.0    2688    1760    ?    S    Jan08    0:00    23:54:45    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1895    0.1    19.5    2069520    1592376    ?    Sl    Jan08    2:18    23:54:45    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    36463    0.0    0.0    0    0    ?    I    Jan08    0:00    20:15:13    [kworker/u20:0-ext4-rsv-conversion]    <noArgs>
root    61735    0.0    0.0    0    0    ?    I    Jan08    0:00    17:39:35    [kworker/u20:1-ext4-rsv-conversion]    <noArgs>
root    102345    0.0    0.0    0    0    ?    I    Jan08    0:00    13:23:57    [kworker/u18:2-ext4-rsv-conversion]    <noArgs>
root    104620    0.0    0.0    0    0    ?    I    Jan08    0:02    13:09:36    [kworker/2:2-ata_sff]    <noArgs>
root    118447    0.0    0.0    0    0    ?    I    Jan08    0:00    11:41:01    [kworker/u19:1-flush-254:0]    <noArgs>
root    133395    0.0    0.0    0    0    ?    I    Jan08    0:00    10:09:34    [kworker/u19:0-kvfree_rcu_reclaim]    <noArgs>
root    157448    0.0    0.0    0    0    ?    I    02:21    0:00    07:39:00    [kworker/u17:2-flush-254:0]    <noArgs>
root    176505    0.0    0.0    0    0    ?    I    04:21    0:00    05:39:33    [kworker/u17:0-events_unbound]    <noArgs>
root    177264    0.0    0.0    0    0    ?    I    04:26    0:00    05:33:53    [kworker/1:1-events]    <noArgs>
root    188740    0.0    0.0    0    0    ?    I    05:39    0:00    04:21:29    [kworker/u17:3-kvfree_rcu_reclaim]    <noArgs>
root    201339    0.0    0.0    0    0    ?    I    06:59    0:00    03:01:32    [kworker/u19:2-flush-254:0]    <noArgs>
root    212478    0.0    0.0    0    0    ?    I    08:06    0:00    01:53:56    [kworker/u18:1-writeback]    <noArgs>
root    217470    0.0    0.0    0    0    ?    I    08:39    0:00    01:21:14    [kworker/u18:0]    <noArgs>
root    226668    0.0    0.0    0    0    ?    I    09:36    0:00    24:34    [kworker/u20:2-ext4-rsv-conversion]    <noArgs>
root    227804    0.0    0.0    0    0    ?    I    09:45    0:00    15:13    [kworker/2:1-ata_sff]    <noArgs>
xrdp    228325    1.0    0.4    62184    40592    ?    S    09:48    0:07    11:51    /usr/sbin/xrdp    <noArgs>
root    228405    0.0    0.0    18320    4384    ?    S    09:49    0:00    11:02    /usr/sbin/xrdp-sesman    <noArgs>
pentester    228408    0.0    0.1    23076    13348    ?    Ss    09:49    0:00    11:02    /usr/lib/systemd/systemd    --user
pentester    228410    0.0    0.0    22592    3848    ?    S    09:49    0:00    11:02    (sd-pam)    <noArgs>
pentester    228430    0.0    0.0    8876    5772    ?    Ss    09:49    0:00    11:02    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
pentester    228431    0.0    0.1    97360    8144    ?    Ssl    09:49    0:00    11:02    /usr/bin/pipewire    <noArgs>
pentester    228432    0.0    1.2    630548    98216    ?    Sl    09:49    0:00    11:02    xfce4-session    <noArgs>
pentester    228433    0.4    1.8    405760    154348    ?    Sl    09:49    0:02    11:02    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    228436    0.0    0.0    7212    3540    ?    Ss    09:49    0:00    11:02    /usr/bin/mpris-proxy    <noArgs>
pentester    228437    0.0    0.1    399580    14224    ?    Ssl    09:49    0:00    11:02    /usr/bin/wireplumber    <noArgs>
pentester    228438    0.0    0.0    84704    5196    ?    Ssl    09:49    0:00    11:02    /usr/bin/pipewire    -c_filter-chain.conf
pentester    228439    0.0    0.1    99176    8828    ?    Ssl    09:49    0:00    11:02    /usr/bin/pipewire-pulse    <noArgs>
pentester    228462    0.0    0.0    95084    6252    ?    Sl    09:49    0:00    11:01    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    228539    0.0    0.0    10688    1856    ?    Ss    09:49    0:00    11:01    /usr/bin/ssh-agent    x-session-manager
pentester    228550    0.0    0.0    381172    7908    ?    Ssl    09:49    0:00    11:01    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    228557    0.0    0.0    8340    4864    ?    S    09:49    0:00    11:01    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    228567    0.0    0.0    168784    7536    ?    Sl    09:49    0:00    11:01    /usr/libexec/at-spi2-registryd    --use-gnome-session
pentester    228581    0.0    0.0    155488    3584    ?    SLsl    09:49    0:00    11:01    /usr/bin/gpg-agent    --supervised
pentester    228584    0.1    0.5    297312    48772    ?    Sl    09:49    0:01    11:01    xfwm4    <noArgs>
pentester    228589    0.0    0.1    312816    8296    ?    Ssl    09:49    0:00    11:01    /usr/libexec/gvfsd    <noArgs>
pentester    228595    0.0    0.0    398408    7524    ?    Sl    09:49    0:00    11:01    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    228619    0.0    0.3    348408    27692    ?    Sl    09:49    0:00    11:00    xfsettingsd    <noArgs>
pentester    228625    0.0    0.0    165276    5788    ?    Ssl    09:49    0:00    11:00    /usr/libexec/dconf-service    <noArgs>
pentester    228626    0.0    0.6    515208    52716    ?    Sl    09:49    0:00    11:00    xfce4-panel    <noArgs>
pentester    228635    0.0    0.3    485792    26180    ?    Sl    09:49    0:00    11:00    Thunar    --daemon
pentester    228648    0.0    0.8    663288    70452    ?    Sl    09:49    0:00    11:00    xfdesktop    <noArgs>
pentester    228653    0.0    0.5    428300    42768    ?    Sl    09:49    0:00    11:00    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_14680071_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    228658    0.0    0.0    7180    3432    ?    S    09:49    0:00    11:00    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    228663    0.0    0.2    405608    19400    ?    Sl    09:49    0:00    11:00    xfce4-power-manager    <noArgs>
pentester    228664    0.0    0.4    281548    35444    ?    Sl    09:49    0:00    11:00    xfce4-screensaver    <noArgs>
pentester    228670    0.0    0.4    540968    38124    ?    Sl    09:49    0:00    11:00    diodon    <noArgs>
pentester    228671    0.0    0.0    12432    1916    ?    Ssl    09:49    0:00    11:00    xcape    -e_Super_L_Control_L_Escape
pentester    228674    0.0    0.7    604468    61924    ?    Sl    09:49    0:00    11:00    /usr/bin/python3    /usr/bin/blueman-applet
pentester    228676    0.0    0.5    66232    40964    ?    S    09:49    0:00    11:00    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pentester    228679    0.0    0.2    416260    21588    ?    Ssl    09:49    0:00    11:00    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    228686    0.0    0.2    265304    18396    ?    Sl    09:49    0:00    11:00    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    228700    0.0    0.0    308560    6784    ?    Sl    09:49    0:00    11:00    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    228703    0.0    0.1    791540    8936    ?    Sl    09:49    0:00    11:00    xiccd    <noArgs>
pentester    228741    0.0    0.5    586932    42896    ?    Sl    09:49    0:00    11:00    nm-applet    <noArgs>
colord    228759    0.0    0.1    317056    15264    ?    Ssl    09:49    0:00    11:00    /usr/libexec/colord    <noArgs>
pentester    228785    0.0    0.0    95896    7608    ?    Sl    09:49    0:00    10:59    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
pentester    228800    0.0    0.1    458472    9848    ?    Ssl    09:49    0:00    10:59    /usr/bin/zeitgeist-daemon    <noArgs>
root    228824    0.0    0.1    318516    10056    ?    Ssl    09:49    0:00    10:59    /usr/libexec/upowerd    <noArgs>
pentester    228846    0.0    0.2    352956    20576    ?    Ssl    09:49    0:00    10:59    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    228868    0.1    0.7    310940    62412    ?    Sl    09:49    0:01    10:59    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_14680076_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    228869    0.0    0.4    499480    38344    ?    Sl    09:49    0:00    10:59    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_14680077_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    228870    0.2    0.3    272796    29112    ?    Sl    09:49    0:01    10:59    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_14680078_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    228871    0.0    0.4    359160    39148    ?    Sl    09:49    0:00    10:59    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_14680079_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    228872    0.0    0.4    425196    37472    ?    Sl    09:49    0:00    10:59    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_14680080_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    228875    0.0    0.4    286068    37468    ?    Sl    09:49    0:00    10:59    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_14680081_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    228891    0.0    0.4    425472    37700    ?    Sl    09:49    0:00    10:59    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_14680082_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    228961    0.0    0.1    538332    11860    ?    Ssl    09:49    0:00    10:58    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
root    228965    0.0    0.1    478372    14244    ?    Ssl    09:49    0:00    10:58    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    228977    0.0    0.0    307864    6840    ?    Ssl    09:49    0:00    10:58    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    228982    0.0    0.0    308884    7128    ?    Ssl    09:49    0:00    10:58    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    228987    0.0    0.0    307916    6788    ?    Ssl    09:49    0:00    10:58    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    228992    0.0    0.1    389944    8820    ?    Ssl    09:49    0:00    10:58    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    229014    0.0    0.0    168868    6620    ?    Ssl    09:49    0:00    10:58    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    229018    0.0    0.1    534256    9264    ?    Sl    09:49    0:00    10:58    /usr/libexec/gvfsd-trash    --spawner_:1.21_/org/gtk/gvfs/exec_spaw/0
pentester    229089    0.1    0.8    808624    71184    ?    Sl    09:49    0:01    10:51    /usr/bin/qterminal    <noArgs>
pentester    229091    0.0    0.2    557008    19820    ?    Ssl    09:49    0:00    10:51    /usr/libexec/xdg-desktop-portal    <noArgs>
pentester    229097    0.0    0.0    308740    6792    ?    Ssl    09:49    0:00    10:51    /usr/libexec/xdg-permission-store    <noArgs>
pentester    229106    0.0    0.0    539704    7112    ?    Ssl    09:49    0:00    10:51    /usr/libexec/xdg-document-portal    <noArgs>
root    229112    0.0    0.0    2592    2008    ?    Ss    09:49    0:00    10:51    fusermount3    -o_rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal_--_/run/user/1001/doc
pentester    229115    0.0    0.2    479576    19676    ?    Ssl    09:49    0:00    10:51    /usr/libexec/xdg-desktop-portal-gtk    <noArgs>
pentester    229135    0.1    0.0    10508    6420    pts/0    Ss+    09:49    0:00    10:51    /usr/bin/zsh    <noArgs>
root    230052    0.0    0.0    0    0    ?    I    09:50    0:00    09:57    [kworker/2:0-mm_percpu_wq]    <noArgs>
root    230775    0.0    0.0    0    0    ?    I<    09:51    0:00    09:05    [kworker/R-tls-strp]    <noArgs>
root    231079    0.0    0.0    0    0    ?    I    09:52    0:00    08:34    [kworker/1:0-ata_sff]    <noArgs>
root    231922    0.0    0.0    0    0    ?    I    09:53    0:00    07:09    [kworker/3:1-ata_sff]    <noArgs>
root    232633    0.0    0.0    0    0    ?    I    09:54    0:00    05:57    [kworker/0:0-ata_sff]    <noArgs>
root    234312    0.0    0.0    0    0    ?    I    09:57    0:00    03:29    [kworker/1:2-ata_sff]    <noArgs>
root    235425    0.0    0.0    0    0    ?    I    09:59    0:00    01:37    [kworker/3:0-ata_sff]    <noArgs>
root    235988    0.0    0.0    0    0    ?    I    10:00    0:00    00:40    [kworker/0:2-ata_sff]    <noArgs>
pentester    236286    0.0    0.0    5588    2000    ?    S    10:00    0:00    00:09    sleep    10
root    236491    0.0    0.0    2688    1824    ?    S    10:00    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    236492    0.0    0.0    2688    1840    ?    S    10:00    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    236513    0.0    0.0    9504    4264    ?    R    10:00    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    236514    0.0    0.0    5592    1884    ?    S    10:00    0:00    00:00    tee    /dev/null
root    236515    0.0    0.0    9472    3924    ?    S    10:00    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}

_sourcetype: ps

source: ps

sourcetype: ps


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24676    15224    ?    Ss    Jan08    0:02    23:55:35    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:35    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:35    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:35    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:35    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:35    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:35    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:04    23:55:35    [kworker/0:1-ata_sff]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:35    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:35    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:55:35    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:35    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:35    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [ksoftirqd/3]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:35    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:35    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:35    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:35    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:35    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:55:35    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:55:35    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:55:35    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:35    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:35    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:35    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:35    [kworker/R-tpm_dev_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:35    [kworker/R-edac-poller]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:35    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:35    [kworker/3:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    I    Jan08    0:05    23:55:35    [kworker/1:1-ata_sff]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:35    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-mld]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:34    [kworker/u16:1-netns]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/u25:0]    <noArgs>
root    175    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/2:1H-kblockd]    <noArgs>
root    204    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/0:1H-kblockd]    <noArgs>
root    234    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:34    [kworker/1:1H-kblockd]    <noArgs>
root    236    0.0    0.0    0    0    ?    I    Jan08    0:04    23:55:33    [kworker/2:2-ata_sff]    <noArgs>
root    248    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-ata_sff]    <noArgs>
root    251    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [scsi_eh_0]    <noArgs>
root    252    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-scsi_tmf_0]    <noArgs>
root    253    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [scsi_eh_1]    <noArgs>
root    254    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-scsi_tmf_1]    <noArgs>
root    303    0.0    0.0    0    0    ?    S    Jan08    0:02    23:55:33    [jbd2/vda1-8]    <noArgs>
root    304    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [hwrng]    <noArgs>
root    382    0.0    0.3    58552    24988    ?    Ss    Jan08    0:00    23:55:31    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    398    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:55:31    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    420    0.0    0.1    37452    12128    ?    Ss    Jan08    0:00    23:55:31    /usr/lib/systemd/systemd-udevd    <noArgs>
root    428    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [psimon]    <noArgs>
root    562    0.0    0.0    8388    6572    ?    Ss    Jan08    0:01    23:55:30    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    607    0.0    0.0    10536    4528    ?    S    Jan08    0:00    23:55:30    dhcpcd:    eth0_[ip4]_[ip6]
root    608    0.0    0.0    10540    2512    ?    S    Jan08    0:00    23:55:30    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2116    ?    S    Jan08    0:00    23:55:30    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2120    ?    S    Jan08    0:00    23:55:30    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:30    [kworker/R-rpciod]    <noArgs>
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:30    [kworker/R-xprtiod]    <noArgs>
root    618    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:30    [kworker/R-cfg80211]    <noArgs>
dhcpcd    627    0.0    0.0    10540    2384    ?    S    Jan08    0:00    23:55:28    dhcpcd:    [DHCP6_proxy]_fe80::7a39:1a2a:bca2:81e0
dhcpcd    629    0.0    0.0    10540    2256    ?    S    Jan08    0:00    23:55:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.202
dhcpcd    648    0.0    0.0    10540    2320    ?    S    Jan08    0:00    23:55:23    dhcpcd:    [BOOTP_proxy]_10.0.254.202
root    741    0.0    0.0    309036    7120    ?    Ssl    Jan08    0:00    23:55:22    /usr/libexec/accounts-daemon    <noArgs>
root    743    0.0    0.0    6876    2752    ?    Ss    Jan08    0:00    23:55:22    /usr/sbin/cron    -f
messagebus    744    0.0    0.0    10084    6520    ?    Ss    Jan08    0:00    23:55:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    746    0.0    0.1    382480    9988    ?    Ssl    Jan08    0:01    23:55:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    748    0.0    0.0    80876    3988    ?    Ssl    Jan08    0:00    23:55:22    /usr/sbin/qemu-ga    <noArgs>
root    751    0.0    0.1    18352    9092    ?    Ss    Jan08    0:00    23:55:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    792    0.0    0.2    336460    18852    ?    Ssl    Jan08    0:00    23:55:22    /usr/sbin/NetworkManager    --no-daemon
root    814    0.0    0.1    317328    12220    ?    Ssl    Jan08    0:00    23:55:22    /usr/sbin/ModemManager    <noArgs>
root    835    0.0    0.0    381356    7796    ?    Ssl    Jan08    0:00    23:55:22    /usr/sbin/lightdm    <noArgs>
root    845    0.0    0.2    1904820    20700    ?    Ssl    Jan08    0:19    23:55:22    /laforge.bin    <noArgs>
root    853    0.0    0.0    18320    4324    ?    S    Jan08    0:00    23:55:22    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    876    0.0    0.0    15652    2416    ?    S    Jan08    0:00    23:55:22    /usr/sbin/xrdp    <noArgs>
root    882    0.0    1.3    915128    107404    tty7    Ssl+    Jan08    0:02    23:55:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    883    0.0    0.0    8124    2688    tty1    Ss+    Jan08    0:00    23:55:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    904    0.0    0.1    169620    8200    ?    Sl    Jan08    0:00    23:55:21    lightdm    --session-child_17_20
lightdm    910    0.0    0.1    22464    12940    ?    Ss    Jan08    0:00    23:55:21    /usr/lib/systemd/systemd    --user
root    912    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:21    [psimon]    <noArgs>
lightdm    914    0.0    0.0    22712    3816    ?    S    Jan08    0:00    23:55:21    (sd-pam)    <noArgs>
root    920    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:21    [kworker/3:2H-kblockd]    <noArgs>
lightdm    938    0.0    0.0    8348    4704    ?    Ss    Jan08    0:00    23:55:21    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    941    0.0    0.1    101224    10860    ?    S<sl    Jan08    0:00    23:55:21    /usr/bin/pipewire    <noArgs>
lightdm    942    0.0    1.2    666648    105456    ?    Ssl    Jan08    0:16    23:55:21    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    944    0.0    0.0    21492    3152    ?    SNsl    Jan08    0:00    23:55:21    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    945    0.0    0.1    479360    16128    ?    S<sl    Jan08    0:00    23:55:21    /usr/bin/wireplumber    <noArgs>
lightdm    946    0.0    0.0    84704    5272    ?    Ssl    Jan08    0:00    23:55:21    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    947    0.0    0.1    98776    8292    ?    S<sl    Jan08    0:00    23:55:21    /usr/bin/pipewire-pulse    <noArgs>
lightdm    972    0.0    0.0    381080    7292    ?    Ssl    Jan08    0:00    23:55:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    987    0.0    0.0    8208    4464    ?    S    Jan08    0:00    23:55:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    993    0.0    0.0    312816    7972    ?    Ssl    Jan08    0:00    23:55:20    /usr/libexec/gvfsd    <noArgs>
lightdm    1003    0.0    0.0    398408    7468    ?    Sl    Jan08    0:00    23:55:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1040    0.0    0.0    14372    5808    ?    S    Jan08    0:00    23:55:20    lightdm    --session-child_13_20
lightdm    1042    0.0    0.0    168772    7152    ?    Sl    Jan08    0:00    23:55:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1072    0.2    1.8    377776    149180    ?    Sl    Jan08    3:34    23:55:19    splunkd    -p_8089_start
root    1075    0.0    0.2    135648    18016    ?    Ss    Jan08    0:04    23:55:19    [splunkd    pid=1072]_splunkd_-p_8089_start_[process-runner]
root    1908    0.0    0.0    2688    1772    ?    S    Jan08    0:00    23:54:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1909    0.1    10.7    1414160    870720    ?    Sl    Jan08    1:51    23:54:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    160052    0.0    0.0    0    0    ?    I    02:39    0:00    07:20:52    [kworker/u17:0-kvfree_rcu_reclaim]    <noArgs>
root    165319    0.0    0.0    0    0    ?    I    03:11    0:01    06:48:46    [kworker/3:0-ata_sff]    <noArgs>
root    167562    0.0    0.0    0    0    ?    I    03:25    0:00    06:34:43    [kworker/u18:2-events_unbound]    <noArgs>
root    186430    0.0    0.0    0    0    ?    I    05:25    0:00    04:35:19    [kworker/u20:1-events_unbound]    <noArgs>
root    189381    0.0    0.0    0    0    ?    I    05:44    0:00    04:16:15    [kworker/u19:1-writeback]    <noArgs>
root    193270    0.0    0.0    0    0    ?    I    06:06    0:00    03:53:57    [kworker/u20:0-events_unbound]    <noArgs>
root    194004    0.0    0.0    0    0    ?    I    06:11    0:00    03:48:49    [kworker/u19:3-ext4-rsv-conversion]    <noArgs>
root    198308    0.0    0.0    0    0    ?    I    06:39    0:00    03:20:52    [kworker/u18:3-kvfree_rcu_reclaim]    <noArgs>
root    207593    0.0    0.0    0    0    ?    I    07:36    0:00    02:23:57    [kworker/u19:0]    <noArgs>
root    214612    0.0    0.0    0    0    ?    I    08:20    0:00    01:39:51    [kworker/u18:1-flush-254:0]    <noArgs>
root    218024    0.0    0.0    0    0    ?    I    08:42    0:00    01:17:57    [kworker/u17:1-flush-254:0]    <noArgs>
root    226683    0.0    0.0    0    0    ?    I    09:35    0:00    24:35    [kworker/u20:2-flush-254:0]    <noArgs>
root    228433    0.0    0.0    0    0    ?    I    09:49    0:00    10:58    [kworker/u17:2-ext4-rsv-conversion]    <noArgs>
xrdp    228498    5.3    0.5    62528    40732    ?    S    09:50    0:33    10:16    /usr/sbin/xrdp    <noArgs>
root    228846    0.0    0.0    18320    4340    ?    S    09:50    0:00    09:58    /usr/sbin/xrdp-sesman    <noArgs>
pentester    228849    0.0    0.1    22904    13188    ?    Ss    09:50    0:00    09:58    /usr/lib/systemd/systemd    --user
pentester    228851    0.0    0.0    22592    3856    ?    S    09:50    0:00    09:58    (sd-pam)    <noArgs>
pentester    228871    0.0    0.0    9032    5876    ?    Ss    09:50    0:00    09:58    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
pentester    228872    0.0    0.1    97472    8540    ?    Ssl    09:50    0:00    09:58    /usr/bin/pipewire    <noArgs>
pentester    228873    0.0    1.2    630548    98176    ?    Sl    09:50    0:00    09:58    xfce4-session    <noArgs>
pentester    228874    2.2    1.9    417940    162352    ?    Sl    09:50    0:13    09:58    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    228877    0.0    0.0    7212    3520    ?    Ss    09:50    0:00    09:58    /usr/bin/mpris-proxy    <noArgs>
pentester    228878    0.0    0.1    399580    14316    ?    Ssl    09:50    0:00    09:58    /usr/bin/wireplumber    <noArgs>
pentester    228879    0.0    0.0    84704    5240    ?    Ssl    09:50    0:00    09:58    /usr/bin/pipewire    -c_filter-chain.conf
pentester    228880    0.0    0.1    100256    9640    ?    Ssl    09:50    0:00    09:58    /usr/bin/pipewire-pulse    <noArgs>
pentester    228903    0.0    0.0    95084    6276    ?    Sl    09:50    0:00    09:58    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    228980    0.0    0.0    10688    1860    ?    Ss    09:50    0:00    09:57    /usr/bin/ssh-agent    x-session-manager
pentester    228991    0.0    0.0    381172    7892    ?    Ssl    09:50    0:00    09:57    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    228998    0.0    0.0    8476    4860    ?    S    09:50    0:00    09:57    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_13_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    229009    0.0    0.0    168784    7580    ?    Sl    09:50    0:00    09:57    /usr/libexec/at-spi2-registryd    --use-gnome-session
pentester    229022    0.0    0.0    155488    3600    ?    SLsl    09:50    0:00    09:57    /usr/bin/gpg-agent    --supervised
pentester    229025    0.3    0.6    297308    48848    ?    Sl    09:50    0:02    09:57    xfwm4    <noArgs>
pentester    229030    0.0    0.0    312816    8104    ?    Ssl    09:50    0:00    09:57    /usr/libexec/gvfsd    <noArgs>
pentester    229036    0.0    0.0    398408    7496    ?    Sl    09:50    0:00    09:57    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    229045    0.0    0.3    348400    26868    ?    Sl    09:50    0:00    09:57    xfsettingsd    <noArgs>
pentester    229051    0.0    0.0    165276    6004    ?    Ssl    09:50    0:00    09:56    /usr/libexec/dconf-service    <noArgs>
pentester    229052    0.1    0.6    516192    54136    ?    Sl    09:50    0:01    09:56    xfce4-panel    <noArgs>
pentester    229061    0.1    0.5    580220    45856    ?    Sl    09:50    0:00    09:56    Thunar    --daemon
pentester    229074    0.1    0.8    663288    69788    ?    Sl    09:50    0:00    09:56    xfdesktop    <noArgs>
pentester    229079    0.0    0.5    428300    42796    ?    Sl    09:50    0:00    09:56    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_14680071_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    229084    0.0    0.0    7180    3288    ?    S    09:50    0:00    09:56    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    229089    0.0    0.2    405608    19372    ?    Sl    09:50    0:00    09:56    xfce4-power-manager    <noArgs>
pentester    229092    0.0    0.4    281548    35524    ?    Sl    09:50    0:00    09:56    xfce4-screensaver    <noArgs>
pentester    229098    0.0    0.4    606504    37900    ?    Sl    09:50    0:00    09:56    diodon    <noArgs>
pentester    229100    0.0    0.7    604468    61928    ?    Sl    09:50    0:00    09:56    /usr/bin/python3    /usr/bin/blueman-applet
pentester    229104    0.0    0.5    66232    41412    ?    S    09:50    0:00    09:56    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pentester    229105    0.0    0.0    12432    2276    ?    Ssl    09:50    0:00    09:56    xcape    -e_Super_L_Control_L_Escape
pentester    229115    0.0    0.4    500056    38568    ?    Ssl    09:50    0:00    09:56    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    229117    0.0    0.2    265304    18348    ?    Sl    09:50    0:00    09:56    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    229143    0.0    0.0    308560    6616    ?    Sl    09:50    0:00    09:56    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    229148    0.0    0.1    791540    8988    ?    Sl    09:50    0:00    09:56    xiccd    <noArgs>
pentester    229167    0.0    0.5    586932    43276    ?    Sl    09:50    0:00    09:56    nm-applet    <noArgs>
colord    229187    0.0    0.1    317092    15328    ?    Ssl    09:50    0:00    09:56    /usr/libexec/colord    <noArgs>
pentester    229209    0.0    0.1    96668    8488    ?    Sl    09:50    0:00    09:56    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
root    229214    0.0    0.1    318516    10052    ?    Ssl    09:50    0:00    09:56    /usr/libexec/upowerd    <noArgs>
pentester    229225    0.0    0.1    457844    8940    ?    Ssl    09:50    0:00    09:56    /usr/bin/zeitgeist-daemon    <noArgs>
pentester    229267    0.0    0.1    349660    13028    ?    Ssl    09:50    0:00    09:56    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    229322    0.3    0.7    310936    63596    ?    Sl    09:50    0:01    09:55    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_14680076_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    229323    0.0    0.4    499532    38092    ?    Sl    09:50    0:00    09:55    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_14680077_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    229324    0.2    0.3    272796    29160    ?    Sl    09:50    0:01    09:55    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_14680078_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    229325    0.0    0.4    359164    39192    ?    Sl    09:50    0:00    09:55    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_14680079_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    229326    0.0    0.4    425196    37480    ?    Sl    09:50    0:00    09:55    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_14680080_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    229328    0.0    0.4    286020    37748    ?    Sl    09:50    0:00    09:55    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_14680081_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    229338    0.0    0.4    425468    37704    ?    Sl    09:50    0:00    09:55    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_14680082_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    229416    0.0    0.1    538332    11920    ?    Ssl    09:50    0:00    09:54    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
root    229420    0.0    0.1    478372    14176    ?    Ssl    09:50    0:00    09:54    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    229432    0.0    0.0    307864    6732    ?    Ssl    09:50    0:00    09:54    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    229437    0.0    0.0    308884    7252    ?    Ssl    09:50    0:00    09:54    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    229442    0.0    0.0    307916    6724    ?    Ssl    09:50    0:00    09:54    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    229447    0.0    0.1    389944    8824    ?    Ssl    09:50    0:00    09:54    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    229461    0.0    0.0    168868    6692    ?    Ssl    09:50    0:00    09:54    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    229473    0.0    0.1    534388    9304    ?    Sl    09:50    0:00    09:54    /usr/libexec/gvfsd-trash    --spawner_:1.21_/org/gtk/gvfs/exec_spaw/0
pentester    229535    0.0    0.7    793532    57208    ?    Sl    09:50    0:00    09:51    /usr/bin/qterminal    <noArgs>
pentester    229537    0.0    0.2    557012    19972    ?    Ssl    09:50    0:00    09:51    /usr/libexec/xdg-desktop-portal    <noArgs>
pentester    229547    0.0    0.0    308740    6740    ?    Ssl    09:50    0:00    09:51    /usr/libexec/xdg-permission-store    <noArgs>
pentester    229552    0.0    0.0    539704    7220    ?    Ssl    09:50    0:00    09:51    /usr/libexec/xdg-document-portal    <noArgs>
root    229558    0.0    0.0    2592    1872    ?    Ss    09:50    0:00    09:51    fusermount3    -o_rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal_--_/run/user/1001/doc
pentester    229561    0.0    0.2    479576    19776    ?    Ssl    09:50    0:00    09:51    /usr/libexec/xdg-desktop-portal-gtk    <noArgs>
pentester    229572    0.1    0.0    10500    6588    pts/0    Ss    09:50    0:00    09:51    /usr/bin/zsh    <noArgs>
root    229604    0.0    0.0    0    0    ?    I    09:50    0:00    09:50    [kworker/3:1-ata_sff]    <noArgs>
pentester    230720    0.0    0.6    545512    52144    ?    Sl    09:51    0:00    08:50    /usr/bin/mousepad    /home/pentester/password.txt
pentester    231563    21.5    7.8    20638668    635992    ?    Sl    09:52    1:36    07:24    /usr/lib/firefox-esr/firefox-esr    <noArgs>
pentester    231568    0.0    0.0    20868    3144    ?    Sl    09:52    0:00    07:24    /usr/lib/firefox-esr/crashhelper    231563_9_/tmp/_11
pentester    231636    0.0    0.5    235292    44652    ?    Sl    09:52    0:00    07:24    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:29611_-prefMapHandle_1:270574_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{0934c52c-1660-4d1c-93ae-0d5315c731c1}_-parentPid_231563_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_1_socket
pentester    231656    0.2    1.6    2492708    136100    ?    Sl    09:52    0:00    07:24    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:29752_-prefMapHandle_1:270574_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{0f534507-0860-455c-90a0-4d98fa9a55df}_-parentPid_231563_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_2_tab
pentester    231662    0.1    0.7    417956    57708    ?    Sl    09:52    0:00    07:24    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:29752_-prefMapHandle_1:270574_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{5fa3c1ee-86af-49c8-96f2-24d417224b37}_-parentPid_231563_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_3_rdd
pentester    231729    0.1    1.2    2467540    103932    ?    Sl    09:52    0:00    07:23    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:38293_-prefMapHandle_1:270574_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{bc3d3820-e553-448e-9bc9-707c2d9abddb}_-parentPid_231563_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_5_tab
pentester    231774    0.0    0.7    377504    64476    ?    Sl    09:53    0:00    07:23    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-sandboxingKind_0_-prefsHandle_0:38531_-prefMapHandle_1:270574_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{a80878d9-7cb2-4efb-8938-9317cc225e9e}_-parentPid_231563_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_6_utility
root    231949    0.0    0.0    0    0    ?    I    09:53    0:00    07:15    [kworker/2:0-ata_sff]    <noArgs>
root    232225    0.0    0.0    0    0    ?    I    09:53    0:00    06:48    [kworker/0:2-ata_sff]    <noArgs>
root    232343    0.0    0.0    0    0    ?    I    09:53    0:00    06:36    [kworker/1:2-events]    <noArgs>
pentester    232939    6.8    6.0    3043888    488212    ?    Sl    09:54    0:25    06:10    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:40343_-prefMapHandle_1:270574_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{cb201f79-e65b-4c38-bc31-3b9a7d2fabae}_-parentPid_231563_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_19_tab
pentester    234478    1.7    2.7    2646204    224388    ?    Sl    09:55    0:04    04:41    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:40343_-prefMapHandle_1:270574_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{eba94409-2550-43d9-8b26-5ef6aa99eed1}_-parentPid_231563_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_28_tab
pentester    234570    0.5    1.9    2540728    161372    ?    Sl    09:55    0:01    04:38    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:40343_-prefMapHandle_1:270574_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{cfd397cd-a8c3-4551-bb86-19ca43503f91}_-parentPid_231563_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_29_tab
pentester    234683    2.7    3.3    2725236    271908    ?    Sl    09:55    0:07    04:33    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:40343_-prefMapHandle_1:270574_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{44922e5e-e7c1-4074-b729-340929c93ef5}_-parentPid_231563_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_32_tab
root    235029    0.0    0.0    0    0    ?    I    09:56    0:00    04:19    [kworker/3:2-events]    <noArgs>
pentester    235055    6.0    4.4    2804164    364208    ?    Rl    09:56    0:15    04:17    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:40343_-prefMapHandle_1:270574_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{a09a3cec-e33e-4f16-a1cb-46faeb533832}_-parentPid_231563_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_34_tab
pentester    235103    0.1    1.3    2475404    108724    ?    Sl    09:56    0:00    04:16    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:40343_-prefMapHandle_1:270574_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{01f60223-5be1-49c2-bdeb-1d9c9e19876c}_-parentPid_231563_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_35_tab
pentester    236257    0.0    0.0    307644    6480    ?    Ssl    09:57    0:00    02:48    /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd    <noArgs>
pentester    236559    0.1    1.1    2450716    92692    ?    Sl    09:58    0:00    02:22    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:40343_-prefMapHandle_1:270574_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{37e5bbcd-4b90-4e31-b01d-10687ec5c7a2}_-parentPid_231563_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_39_tab
pentester    236571    0.1    1.1    2451724    92416    ?    Sl    09:58    0:00    02:22    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:40343_-prefMapHandle_1:270574_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{c4a762f2-39ad-4a6e-8008-3b3b1cfa9efb}_-parentPid_231563_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_40_tab
pentester    236648    0.0    0.9    2432432    79484    ?    Sl    09:58    0:00    02:19    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:40343_-prefMapHandle_1:270574_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{dba62024-bdf2-4392-b597-8a9008e8e18e}_-parentPid_231563_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_41_tab
root    236760    0.0    0.0    0    0    ?    I    09:58    0:00    02:10    [kworker/2:1-events]    <noArgs>
root    237006    0.0    0.0    20156    7600    pts/0    S+    09:58    0:00    01:46    sudo    nmap_10.0.1.10_-sC_-sV_-v_-p-
root    237008    0.0    0.0    20156    2608    pts/1    Ss    09:58    0:00    01:46    sudo    nmap_10.0.1.10_-sC_-sV_-v_-p-
root    237009    0.8    2.2    286532    182388    pts/1    S+    09:58    0:00    01:46    /usr/lib/nmap/nmap    10.0.1.10_-sC_-sV_-v_-p-
root    237369    0.0    0.0    0    0    ?    I    09:59    0:00    01:10    [kworker/0:0-events]    <noArgs>
root    237403    0.0    0.0    0    0    ?    I    09:59    0:00    01:06    [kworker/1:0-ata_sff]    <noArgs>
pentester    237488    0.1    0.9    2432432    79188    ?    Sl    09:59    0:00    00:59    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:40343_-prefMapHandle_1:270574_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{2eab87e8-268d-4e3d-9f5f-69def70d3c3e}_-parentPid_231563_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_42_tab
pentester    237654    0.1    0.9    2432432    79192    ?    Sl    09:59    0:00    00:45    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:40343_-prefMapHandle_1:270574_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{240abbde-03b7-4e01-a225-a98f0ce244f9}_-parentPid_231563_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_43_tab
pentester    238155    0.0    0.0    5588    2092    ?    S    10:00    0:00    00:06    sleep    10
root    238264    0.0    0.0    2688    1764    ?    S    10:00    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    238265    0.0    0.0    2688    1920    ?    S    10:00    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    238286    0.0    0.0    9636    4348    ?    R    10:00    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    238287    0.0    0.0    5592    1968    ?    S    10:00    0:00    00:00    tee    /dev/null
root    238288    0.0    0.0    9472    4008    ?    S    10:00    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}