_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.2    0.0    24436    3688    ?    Rs    Jan09    2:48    19:21:17    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:17    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:17    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:17    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:17    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:17    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:17    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:17    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:17    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan09    0:00    19:21:17    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:17    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan09    0:04    19:21:17    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan09    0:22    19:21:17    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:17    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:17    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:17    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:17    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:17    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:17    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:17    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:17    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan09    0:03    19:21:17    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:17    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:17    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:17    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:17    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan09    0:02    19:21:17    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:17    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:17    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:17    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:17    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan09    0:02    19:21:17    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:17    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:17    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:17    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan09    0:00    19:21:17    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan09    0:00    19:21:17    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan09    0:00    19:21:17    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:17    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:17    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:17    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:17    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan09    0:20    19:21:17    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan09    0:00    19:21:17    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan09    0:06    19:21:17    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:17    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:17    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:17    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:17    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:17    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:17    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:17    [kworker/R-devfreq_wq]    <noArgs>
root    69    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:17    [kworker/1:1H-kblockd]    <noArgs>
root    70    1.6    0.0    0    0    ?    R    Jan09    19:01    19:21:17    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:16    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:16    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:16    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:16    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I    Jan09    0:00    19:21:16    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    90    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:16    [kworker/R-kstrp]    <noArgs>
root    96    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:16    [kworker/u21:0]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:16    [kworker/u22:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:16    [kworker/u23:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:16    [kworker/u24:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:16    [kworker/u25:0]    <noArgs>
root    171    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:16    [kworker/2:1H-kblockd]    <noArgs>
root    200    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:16    [kworker/0:1H-kblockd]    <noArgs>
root    231    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:16    [kworker/3:1H-kblockd]    <noArgs>
root    251    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:15    [kworker/R-ata_sff]    <noArgs>
root    258    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:15    [scsi_eh_0]    <noArgs>
root    259    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:15    [kworker/R-scsi_tmf_0]    <noArgs>
root    260    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:15    [scsi_eh_1]    <noArgs>
root    261    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:15    [kworker/R-scsi_tmf_1]    <noArgs>
root    301    0.0    0.0    0    0    ?    S    Jan09    0:07    19:21:15    [jbd2/vda1-8]    <noArgs>
root    302    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:15    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    326    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:14    [hwrng]    <noArgs>
root    381    0.0    0.0    56060    1576    ?    Rs    Jan09    1:03    19:21:13    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    410    0.0    0.0    90028    176    ?    Ssl    Jan09    0:05    19:21:13    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    416    0.0    0.0    37324    612    ?    Ss    Jan09    0:07    19:21:13    /usr/lib/systemd/systemd-udevd    <noArgs>
root    423    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:13    [psimon]    <noArgs>
root    553    0.0    0.0    8388    128    ?    Ss    Jan09    0:07    19:21:12    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    602    0.0    0.0    10528    80    ?    S    Jan09    0:04    19:21:12    dhcpcd:    eth0_[ip4]_[ip6]
root    603    0.0    0.0    10536    8    ?    S    Jan09    0:00    19:21:12    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    604    0.0    0.0    10516    4    ?    S    Jan09    0:00    19:21:12    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    605    0.0    0.0    10516    4    ?    S    Jan09    0:00    19:21:12    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    607    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:12    [kworker/R-rpciod]    <noArgs>
root    608    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:12    [kworker/R-xprtiod]    <noArgs>
root    613    0.0    0.0    0    0    ?    I<    Jan09    0:00    19:21:12    [kworker/R-cfg80211]    <noArgs>
dhcpcd    623    0.0    0.0    10536    4    ?    S    Jan09    0:00    19:21:11    dhcpcd:    [BPF_ARP]_eth0_10.0.254.206
dhcpcd    624    0.0    0.0    10536    4    ?    S    Jan09    0:00    19:21:11    dhcpcd:    [DHCP6_proxy]_fe80::501c:eee4:8a1b:d31c
dhcpcd    643    0.0    0.0    10536    4    ?    S    Jan09    0:00    19:21:05    dhcpcd:    [BOOTP_proxy]_10.0.254.206
root    736    0.0    0.0    309036    148    ?    Ssl    Jan09    0:04    19:21:05    /usr/libexec/accounts-daemon    <noArgs>
root    738    0.0    0.0    6876    108    ?    Ss    Jan09    0:03    19:21:05    /usr/sbin/cron    -f
messagebus    739    0.0    0.0    10108    1580    ?    Ss    Jan09    0:03    19:21:05    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    740    0.0    0.0    383548    3360    ?    Ssl    Jan09    0:16    19:21:05    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    743    0.0    0.0    80876    16    ?    Ssl    Jan09    0:00    19:21:05    /usr/sbin/qemu-ga    <noArgs>
root    746    0.0    0.0    18224    348    ?    Ss    Jan09    0:08    19:21:05    /usr/lib/systemd/systemd-logind    <noArgs>
root    765    0.0    0.0    336432    44    ?    Ssl    Jan09    0:00    19:21:05    /usr/sbin/NetworkManager    --no-daemon
root    799    0.0    0.0    391064    32    ?    Ssl    Jan09    0:00    19:21:05    /usr/sbin/ModemManager    <noArgs>
root    819    0.0    0.0    381388    56    ?    SLsl    Jan09    0:00    19:21:05    /usr/sbin/lightdm    <noArgs>
root    829    0.0    0.0    18320    244    ?    S    Jan09    0:00    19:21:05    /usr/sbin/xrdp-sesman    <noArgs>
root    840    0.0    0.0    7180    12    ?    Ss    Jan09    0:00    19:21:05    /usr/bin/bash    -c_/usr/bin/bpftrace_/home/pentester/Stanford-university/logging/participant_env/verbose-log/bpf-scripts/tcp-tracker.bt_>>_/home/pentester/Stanford-university/logging/participant_env/verbose-log/network-logs/tcp-tracker.log_2>&1
root    841    0.0    0.0    7180    12    ?    Ss    Jan09    0:00    19:21:05    /usr/bin/bash    -c_/usr/bin/bpftrace_/home/pentester/Stanford-university/logging/participant_env/verbose-log/bpf-scripts/udp-tracker.bt_>>_/home/pentester/Stanford-university/logging/participant_env/verbose-log/network-logs/udp-tracker.log_2>&1
root    848    0.4    0.0    2347212    7536    ?    Ssl    Jan09    5:09    19:21:05    /laforge.bin    <noArgs>
root    855    0.1    0.0    391948    5300    ?    S    Jan09    1:34    19:21:05    /usr/bin/bpftrace    /home/pentester/Stanford-university/logging/participant_env/verbose-log/bpf-scripts/udp-tracker.bt
root    856    0.4    0.1    395376    11720    ?    S    Jan09    5:07    19:21:05    /usr/bin/bpftrace    /home/pentester/Stanford-university/logging/participant_env/verbose-log/bpf-scripts/tcp-tracker.bt
xrdp    871    0.0    0.0    15652    88    ?    S    Jan09    0:02    19:21:05    /usr/sbin/xrdp    <noArgs>
root    873    0.0    0.0    8124    20    tty1    Ss+    Jan09    0:00    19:21:05    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    874    0.0    0.1    915128    10380    tty7    Rsl+    Jan09    0:34    19:21:05    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    928    0.0    0.0    169616    12    ?    Sl    Jan09    0:00    19:21:04    lightdm    --session-child_17_20
lightdm    936    0.0    0.0    22568    316    ?    Ss    Jan09    0:09    19:21:04    /usr/lib/systemd/systemd    --user
root    938    0.0    0.0    0    0    ?    S    Jan09    0:00    19:21:04    [psimon]    <noArgs>
lightdm    942    0.0    0.0    22712    8    ?    S    Jan09    0:00    19:21:04    (sd-pam)    <noArgs>
lightdm    969    0.0    0.0    8384    56    ?    Ss    Jan09    0:00    19:21:03    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    971    0.4    0.1    666648    12948    ?    Ssl    Jan09    5:13    19:21:03    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    974    0.0    0.0    98776    36    ?    Ssl    Jan09    0:00    19:21:03    /usr/bin/pipewire-pulse    <noArgs>
rtkit    976    0.0    0.0    87028    176    ?    SNsl    Jan09    0:03    19:21:03    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    998    0.0    0.0    381080    12    ?    Ssl    Jan09    0:00    19:21:03    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    1007    0.0    0.0    8208    16    ?    S    Jan09    0:00    19:21:03    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    1011    0.0    0.0    312816    12    ?    Ssl    Jan09    0:00    19:21:03    /usr/libexec/gvfsd    <noArgs>
lightdm    1020    0.0    0.0    398408    12    ?    Sl    Jan09    0:00    19:21:03    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1051    1.6    0.8    392112    70128    ?    Sl    Jan09    19:32    19:21:03    splunkd    -p_8089_start
root    1054    0.0    0.0    135648    740    ?    Ss    Jan09    0:06    19:21:03    [splunkd    pid=1051]_splunkd_-p_8089_start_[process-runner]
root    1064    0.0    0.0    14808    44    ?    S    Jan09    0:00    19:21:03    lightdm    --session-child_13_20
lightdm    1066    0.0    0.0    168772    12    ?    Sl    Jan09    0:00    19:21:03    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1931    0.0    0.0    2688    12    ?    S    Jan09    0:00    19:20:31    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1932    0.9    13.2    2135056    1076660    ?    Sl    Jan09    11:11    19:20:31    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
pentester    2361    0.0    0.0    22964    1160    ?    Ss    Jan09    0:14    19:17:58    /usr/lib/systemd/systemd    --user
pentester    2363    0.0    0.0    22592    8    ?    S    Jan09    0:00    19:17:58    (sd-pam)    <noArgs>
pentester    2660    0.0    0.0    7180    144    ?    S    Jan09    0:06    19:17:56    /bin/bash    /usr/local/bin/log_wintitles.sh
root    2661    0.0    0.0    318516    160    ?    Ssl    Jan09    0:00    19:17:56    /usr/libexec/upowerd    <noArgs>
colord    2772    0.0    0.0    317052    748    ?    Ssl    Jan09    0:00    19:17:56    /usr/libexec/colord    <noArgs>
root    2802    0.0    0.0    478376    812    ?    Ssl    Jan09    0:10    19:17:56    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    3319    0.0    0.0    109248    16    ?    Sl    Jan09    0:00    19:17:38    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-134709-3311-pentester.log
pentester    3320    0.0    0.0    0    0    ?    Z    Jan09    0:00    19:17:38    [asciinema]    <defunct>
pentester    3321    0.0    0.0    0    0    ?    Z    Jan09    0:00    19:17:38    [asciinema]    <defunct>
pentester    3322    0.0    0.0    2688    12    pts/3    Ss    Jan09    0:00    19:17:38    sh    -c_/usr/bin/zsh
pentester    3323    0.0    0.0    10332    12    pts/3    S    Jan09    0:00    19:17:38    /usr/bin/zsh    <noArgs>
pentester    32370    0.0    0.0    109620    260    ?    Sl    Jan09    0:15    18:44:07    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-142040-32354-pentester.log
pentester    32371    0.0    0.0    0    0    ?    Z    Jan09    0:00    18:44:07    [asciinema]    <defunct>
pentester    32372    0.0    0.0    0    0    ?    Z    Jan09    0:09    18:44:07    [asciinema]    <defunct>
pentester    32373    0.0    0.0    2688    12    pts/1    Ss    Jan09    0:00    18:44:07    sh    -c_/usr/bin/zsh
pentester    32374    0.0    0.0    13612    12    pts/1    S    Jan09    0:00    18:44:07    /usr/bin/zsh    <noArgs>
pentester    41608    0.0    0.0    109248    16    ?    Sl    Jan09    0:00    18:33:11    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-143136-41600-pentester.log
pentester    41609    0.0    0.0    0    0    ?    Z    Jan09    0:00    18:33:11    [asciinema]    <defunct>
pentester    41610    0.0    0.0    0    0    ?    Z    Jan09    0:00    18:33:11    [asciinema]    <defunct>
pentester    41611    0.0    0.0    2688    12    pts/11    Ss    Jan09    0:00    18:33:11    sh    -c_/usr/bin/zsh
pentester    41612    0.0    0.0    10332    12    pts/11    S+    Jan09    0:00    18:33:11    /usr/bin/zsh    <noArgs>
pentester    54253    0.0    0.0    109248    16    ?    Sl    Jan09    0:00    18:18:09    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-144637-54245-pentester.log
pentester    54254    0.0    0.0    0    0    ?    Z    Jan09    0:00    18:18:09    [asciinema]    <defunct>
pentester    54255    0.0    0.0    0    0    ?    Z    Jan09    0:00    18:18:09    [asciinema]    <defunct>
pentester    54256    0.0    0.0    2688    12    pts/13    Ss    Jan09    0:00    18:18:09    sh    -c_/usr/bin/zsh
pentester    54257    0.0    0.0    10432    12    pts/13    S    Jan09    0:00    18:18:09    /usr/bin/zsh    <noArgs>
pentester    63489    3.5    1.9    75586156    157064    pts/1    Rl+    Jan09    38:51    18:07:06    claude    <noArgs>
pentester    85443    0.0    0.0    109248    16    ?    Sl    Jan09    0:00    17:42:22    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-152225-85408-pentester.log
pentester    85444    0.0    0.0    0    0    ?    Z    Jan09    0:00    17:42:22    [asciinema]    <defunct>
pentester    85445    0.0    0.0    0    0    ?    Z    Jan09    0:00    17:42:22    [asciinema]    <defunct>
pentester    85446    0.0    0.0    2688    12    pts/6    Ss    Jan09    0:00    17:42:22    sh    -c_/usr/bin/zsh
pentester    85447    0.0    0.0    14072    12    pts/6    S+    Jan09    0:01    17:42:22    /usr/bin/zsh    <noArgs>
pentester    115351    0.0    0.0    109360    16    ?    Sl    Jan09    0:00    17:15:20    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-154927-115311-pentester.log
pentester    115352    0.0    0.0    0    0    ?    Z    Jan09    0:00    17:15:20    [asciinema]    <defunct>
pentester    115353    0.0    0.0    0    0    ?    Z    Jan09    0:00    17:15:20    [asciinema]    <defunct>
pentester    115354    0.0    0.0    2688    12    pts/8    Ss    Jan09    0:00    17:15:20    sh    -c_/usr/bin/zsh
pentester    115355    0.0    0.0    10340    12    pts/8    S    Jan09    0:00    17:15:20    /usr/bin/zsh    <noArgs>
pentester    115459    0.0    0.0    3320    12    pts/8    S+    Jan09    0:00    17:15:14    nc    -lnvp_4444
pentester    115966    0.0    0.0    109360    16    ?    Sl    Jan09    0:00    17:14:37    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-155009-115958-pentester.log
pentester    115967    0.0    0.0    0    0    ?    Z    Jan09    0:00    17:14:37    [asciinema]    <defunct>
pentester    115968    0.0    0.0    0    0    ?    Z    Jan09    0:00    17:14:37    [asciinema]    <defunct>
pentester    115969    0.0    0.0    2688    12    pts/16    Ss    Jan09    0:00    17:14:37    sh    -c_/usr/bin/zsh
pentester    115970    0.0    0.0    13624    12    pts/16    S    Jan09    0:00    17:14:37    /usr/bin/zsh    <noArgs>
pentester    116283    0.0    0.0    105956    4452    pts/16    S+    Jan09    1:01    17:14:15    python3    -m_http.server
pentester    119089    0.0    0.0    109628    16    ?    Sl    Jan09    0:00    17:10:38    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-155409-119077-pentester.log
pentester    119090    0.0    0.0    0    0    ?    Z    Jan09    0:00    17:10:38    [asciinema]    <defunct>
pentester    119091    0.0    0.0    0    0    ?    Z    Jan09    0:00    17:10:38    [asciinema]    <defunct>
pentester    119092    0.0    0.0    2688    12    pts/20    Ss    Jan09    0:00    17:10:38    sh    -c_/usr/bin/zsh
pentester    119093    0.0    0.0    10160    12    pts/20    S+    Jan09    0:00    17:10:38    /usr/bin/zsh    <noArgs>
pentester    120677    0.0    0.0    109360    16    ?    Sl    Jan09    0:00    17:08:44    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-155602-120665-pentester.log
pentester    120678    0.0    0.0    0    0    ?    Z    Jan09    0:00    17:08:44    [asciinema]    <defunct>
pentester    120679    0.0    0.0    0    0    ?    Z    Jan09    0:00    17:08:44    [asciinema]    <defunct>
pentester    120680    0.0    0.0    2688    12    pts/22    Ss    Jan09    0:00    17:08:44    sh    -c_/usr/bin/zsh
pentester    120681    0.0    0.0    10340    12    pts/22    S+    Jan09    0:00    17:08:44    /usr/bin/zsh    <noArgs>
pentester    132875    0.0    0.0    17168    100    ?    Ss    Jan09    0:00    16:53:38    tmux    <noArgs>
pentester    132876    0.0    0.0    10340    36    pts/23    Ss+    Jan09    0:00    16:53:38    -zsh    <noArgs>
pentester    139879    0.0    0.0    109360    24    ?    Sl    Jan09    0:00    16:44:58    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-161949-139871-pentester.log
pentester    139880    0.0    0.0    0    0    ?    Z    Jan09    0:00    16:44:58    [asciinema]    <defunct>
pentester    139881    0.0    0.0    0    0    ?    Z    Jan09    0:00    16:44:58    [asciinema]    <defunct>
pentester    139882    0.0    0.0    2688    12    pts/27    Ss    Jan09    0:00    16:44:58    sh    -c_/usr/bin/zsh
pentester    139883    0.0    0.0    10340    12    pts/27    S+    Jan09    0:00    16:44:58    /usr/bin/zsh    <noArgs>
pentester    141319    0.0    0.0    109360    16    ?    Sl    Jan09    0:00    16:43:10    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-162137-141307-pentester.log
pentester    141328    0.0    0.0    0    0    ?    Z    Jan09    0:00    16:43:09    [asciinema]    <defunct>
pentester    141329    0.0    0.0    0    0    ?    Z    Jan09    0:00    16:43:09    [asciinema]    <defunct>
pentester    141330    0.0    0.0    2688    12    pts/29    Ss    Jan09    0:00    16:43:09    sh    -c_/usr/bin/zsh
pentester    141331    0.0    0.0    10336    12    pts/29    S    Jan09    0:00    16:43:09    /usr/bin/zsh    <noArgs>
pentester    142920    0.0    0.0    109360    16    ?    Sl    Jan09    0:00    16:41:08    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260109-162339-142908-pentester.log
pentester    142921    0.0    0.0    0    0    ?    Z    Jan09    0:00    16:41:07    [asciinema]    <defunct>
pentester    142922    0.0    0.0    0    0    ?    Z    Jan09    0:00    16:41:07    [asciinema]    <defunct>
pentester    142923    0.0    0.0    2688    12    pts/31    Ss    Jan09    0:00    16:41:07    sh    -c_/usr/bin/zsh
pentester    142924    0.0    0.0    10336    12    pts/31    S+    Jan09    0:00    16:41:07    /usr/bin/zsh    <noArgs>
root    666762    0.0    0.0    19964    12    pts/3    S+    09:06    0:00    04:35:35    sudo    su
pentester    673350    0.0    0.0    3320    12    pts/13    S+    09:14    0:00    04:26:51    netcat    10.0.1.10_6768
pentester    673473    0.0    0.0    3320    12    pts/29    S+    09:15    0:00    04:26:41    nc    -lnvp_5555
pentester    716337    0.0    0.0    109360    16    ?    Sl    09:59    0:00    03:42:09    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-095932-716321-pentester.log
pentester    716338    0.0    0.0    0    0    ?    Z    09:59    0:00    03:42:09    [asciinema]    <defunct>
pentester    716339    0.0    0.0    0    0    ?    Z    09:59    0:00    03:42:09    [asciinema]    <defunct>
pentester    716340    0.0    0.0    2688    12    pts/33    Ss    09:59    0:00    03:42:09    sh    -c_/usr/bin/zsh
pentester    716341    0.0    0.0    10340    12    pts/33    S    09:59    0:00    03:42:09    /usr/bin/zsh    <noArgs>
pentester    716433    0.0    0.0    25140    12    pts/33    S+    09:59    0:00    03:42:03    mysql    -u_devuser_-h_10.0.1.99_-p_--skip-ssl
pentester    731670    0.0    0.0    109360    16    ?    Sl    10:10    0:00    03:30:45    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-101057-731658-pentester.log
pentester    731704    0.0    0.0    0    0    ?    Z    10:10    0:00    03:30:45    [asciinema]    <defunct>
pentester    731705    0.0    0.0    0    0    ?    Z    10:10    0:00    03:30:45    [asciinema]    <defunct>
pentester    731706    0.0    0.0    2688    12    pts/43    Ss    10:10    0:00    03:30:45    sh    -c_/usr/bin/zsh
pentester    731707    0.0    0.0    13640    12    pts/43    S+    10:10    0:00    03:30:45    /usr/bin/zsh    <noArgs>
pentester    745765    0.0    0.0    10456    84    pts/44    Ss+    10:28    0:00    03:13:24    -zsh    <noArgs>
lightdm    783381    0.0    0.0    99836    644    ?    Ssl    10:59    0:00    02:42:29    /usr/bin/pipewire    <noArgs>
lightdm    783382    0.0    0.0    479240    188    ?    Ssl    10:59    0:00    02:42:29    /usr/bin/wireplumber    <noArgs>
lightdm    783383    0.0    0.0    84704    32    ?    Ssl    10:59    0:00    02:42:29    /usr/bin/pipewire    -c_filter-chain.conf
pentester    783393    0.0    0.0    98880    44    ?    Ssl    10:59    0:00    02:42:29    /usr/bin/pipewire    <noArgs>
pentester    783394    0.0    0.0    399660    2156    ?    Ssl    10:59    0:00    02:42:29    /usr/bin/wireplumber    <noArgs>
pentester    783396    0.0    0.0    84704    20    ?    Ssl    10:59    0:00    02:42:28    /usr/bin/pipewire    -c_filter-chain.conf
pentester    783397    0.0    0.0    171728    2408    ?    SLsl    10:59    0:08    02:42:28    /usr/bin/pipewire-pulse    <noArgs>
pentester    783422    0.0    0.0    9076    1100    ?    Ss    10:59    0:00    02:42:28    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
pentester    783913    0.0    0.0    20368    5032    ?    Ss    10:59    0:00    02:42:10    python3    /home/pentester/Stanford-university/logging/participant_env/screen-record/screen-record.py
root    783920    0.0    0.0    18320    120    ?    S    10:59    0:00    02:42:09    /usr/sbin/xrdp-sesman    <noArgs>
pentester    783921    0.0    0.2    630548    16456    ?    Sl    10:59    0:03    02:42:09    xfce4-session    <noArgs>
pentester    783922    11.0    5.3    900836    438528    ?    Dl    10:59    17:59    02:42:09    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    783925    0.0    0.0    94684    2332    ?    Sl    10:59    0:00    02:42:08    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    784012    0.0    0.0    10688    116    ?    Ss    10:59    0:00    02:42:08    /usr/bin/ssh-agent    x-session-manager
pentester    784042    0.0    0.0    381176    16    ?    Ssl    10:59    0:00    02:42:08    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    784049    0.0    0.0    8476    284    ?    S    10:59    0:00    02:42:08    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    784060    0.0    0.0    168784    356    ?    Sl    10:59    0:01    02:42:08    /usr/libexec/at-spi2-registryd    --use-gnome-session
pentester    784071    0.0    0.0    155488    232    ?    SLsl    10:59    0:02    02:42:08    /usr/bin/gpg-agent    --supervised
pentester    784074    0.7    0.3    1185120    26316    ?    Sl    10:59    1:17    02:42:08    xfwm4    <noArgs>
pentester    784079    0.0    0.0    312816    64    ?    Ssl    10:59    0:00    02:42:08    /usr/libexec/gvfsd    <noArgs>
pentester    784085    0.0    0.0    398408    56    ?    Sl    10:59    0:00    02:42:07    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    784103    0.0    0.0    351028    5500    ?    Sl    10:59    0:04    02:42:07    xfsettingsd    <noArgs>
pentester    784109    0.0    0.0    165276    280    ?    Ssl    10:59    0:00    02:42:07    /usr/libexec/dconf-service    <noArgs>
pentester    784113    0.1    0.1    506936    8992    ?    Sl    10:59    0:16    02:42:07    xfce4-panel    <noArgs>
pentester    784119    0.0    0.0    485784    2872    ?    Sl    10:59    0:00    02:42:07    Thunar    --daemon
pentester    784126    0.2    0.2    744668    22960    ?    Sl    10:59    0:22    02:42:07    xfdesktop    <noArgs>
pentester    784131    0.0    0.0    429180    6328    ?    Sl    10:59    0:05    02:42:07    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_16777223_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    784136    0.7    0.1    310940    12164    ?    Sl    10:59    1:13    02:42:07    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_16777228_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    784137    0.0    0.0    425796    4544    ?    Sl    10:59    0:01    02:42:07    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_16777229_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    784138    0.2    0.0    272796    5232    ?    Sl    10:59    0:24    02:42:07    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_16777230_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    784140    0.0    0.0    359488    4148    ?    Sl    10:59    0:01    02:42:07    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_16777231_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    784141    0.0    0.0    425196    5108    ?    Sl    10:59    0:00    02:42:07    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_16777232_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    784144    0.0    0.0    286396    3896    ?    Sl    10:59    0:00    02:42:07    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_16777233_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    784154    0.0    0.0    425424    4944    ?    Sl    10:59    0:00    02:42:07    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_16777234_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    784178    0.0    0.0    7180    144    ?    S    10:59    0:01    02:42:06    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    784187    0.0    0.0    405608    1156    ?    Sl    10:59    0:00    02:42:06    xfce4-power-manager    <noArgs>
pentester    784188    0.0    0.1    281548    14192    ?    Sl    10:59    0:04    02:42:06    xfce4-screensaver    <noArgs>
pentester    784194    0.0    0.0    732728    5064    ?    Sl    10:59    0:02    02:42:06    diodon    <noArgs>
pentester    784201    0.0    0.0    12432    116    ?    Ssl    10:59    0:00    02:42:06    xcape    -e_Super_L_Control_L_Escape
pentester    784205    0.0    0.0    434476    4356    ?    Ssl    10:59    0:00    02:42:06    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    784207    0.0    0.1    603956    11252    ?    Sl    10:59    0:03    02:42:06    /usr/bin/python3    /usr/bin/blueman-applet
pentester    784208    0.0    0.0    66228    6736    ?    S    10:59    0:01    02:42:06    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pentester    784219    0.0    0.0    265304    856    ?    Sl    10:59    0:00    02:42:06    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    784241    0.0    0.0    308560    12    ?    Sl    10:59    0:00    02:42:06    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    784244    0.0    0.0    922616    1168    ?    Sl    10:59    0:00    02:42:06    xiccd    <noArgs>
pentester    784273    0.0    0.0    586928    3188    ?    Sl    10:59    0:00    02:42:06    nm-applet    <noArgs>
pentester    784315    0.0    0.0    392788    620    ?    Ssl    10:59    0:00    02:42:06    /usr/bin/zeitgeist-daemon    <noArgs>
pentester    784321    0.0    0.0    96680    16    ?    Sl    10:59    0:00    02:42:06    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
pentester    784326    0.0    0.0    538332    916    ?    Dsl    10:59    0:00    02:42:06    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
pentester    784340    0.0    0.0    352916    2444    ?    Ssl    10:59    0:00    02:42:06    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    784350    0.0    0.0    307864    32    ?    Ssl    10:59    0:00    02:42:06    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    784362    0.0    0.0    308884    72    ?    Ssl    10:59    0:00    02:42:06    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    784372    0.0    0.0    307916    80    ?    Ssl    10:59    0:00    02:42:06    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    784378    0.0    0.0    389944    80    ?    Ssl    10:59    0:05    02:42:06    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    784404    0.0    0.0    168904    216    ?    Ssl    10:59    0:00    02:42:05    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    784426    0.0    0.0    534256    772    ?    Sl    10:59    0:00    02:42:05    /usr/libexec/gvfsd-trash    --spawner_:1.20_/org/gtk/gvfs/exec_spaw/0
pentester    784546    1.0    0.1    823320    15500    ?    Sl    10:59    1:40    02:41:58    /usr/bin/qterminal    <noArgs>
pentester    784556    0.0    0.0    557236    748    ?    Ssl    10:59    0:00    02:41:58    /usr/libexec/xdg-desktop-portal    <noArgs>
pentester    784563    0.0    0.0    308740    60    ?    Ssl    10:59    0:00    02:41:58    /usr/libexec/xdg-permission-store    <noArgs>
pentester    784571    0.0    0.0    539704    380    ?    Ssl    10:59    0:00    02:41:58    /usr/libexec/xdg-document-portal    <noArgs>
root    784577    0.0    0.0    2592    12    ?    Ss    10:59    0:00    02:41:58    fusermount3    -o_rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal_--_/run/user/1001/doc
pentester    784581    0.0    0.0    479576    752    ?    Ssl    10:59    0:00    02:41:58    /usr/libexec/xdg-desktop-portal-gtk    <noArgs>
pentester    784588    0.0    0.0    10044    12    pts/4    Ss    10:59    0:00    02:41:58    /usr/bin/zsh    <noArgs>
pentester    784604    0.0    0.0    109364    1124    pts/4    Sl+    10:59    0:04    02:41:58    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-105944-784588-pentester.log
pentester    784605    0.0    0.0    35600    172    pts/4    S+    10:59    0:00    02:41:58    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-105944-784588-pentester.log
pentester    784606    0.0    0.0    36016    1236    pts/4    S+    10:59    0:02    02:41:58    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-105944-784588-pentester.log
pentester    784607    0.0    0.0    2688    12    pts/14    Ss    10:59    0:00    02:41:58    sh    -c_/usr/bin/zsh
pentester    784608    0.0    0.0    10336    12    pts/14    S    10:59    0:00    02:41:58    /usr/bin/zsh    <noArgs>
pentester    784646    11.3    3.0    12247904    250600    ?    Sl    10:59    18:23    02:41:55    /usr/lib/firefox-esr/firefox-esr    <noArgs>
pentester    784651    0.0    0.0    20868    108    ?    Sl    10:59    0:00    02:41:55    /usr/lib/firefox-esr/crashhelper    784646_9_/tmp/_11
pentester    784746    0.0    0.0    236316    648    ?    Sl    10:59    0:00    02:41:54    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:34528_-prefMapHandle_1:271610_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{050d0871-a1e8-48b1-9816-86cdc468e25b}_-parentPid_784646_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_1_socket
pentester    784768    0.2    0.4    2531244    33880    ?    Rl    10:59    0:24    02:41:54    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:34718_-prefMapHandle_1:271610_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{6bd31b50-cb3e-465d-964a-9d6e3b3f968c}_-parentPid_784646_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_2_tab
pentester    784775    0.0    0.0    405668    784    ?    Sl    10:59    0:00    02:41:54    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:34718_-prefMapHandle_1:271610_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{01f7f492-8edb-4096-923c-818c53b6cdc4}_-parentPid_784646_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_3_rdd
pentester    784845    0.0    0.1    2469084    11216    ?    Sl    10:59    0:03    02:41:53    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:43117_-prefMapHandle_1:271610_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{9ed495f9-8095-42aa-8109-2adda31b6951}_-parentPid_784646_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_4_tab
pentester    784899    0.0    0.0    375432    796    ?    Sl    10:59    0:00    02:41:52    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-sandboxingKind_0_-prefsHandle_0:43264_-prefMapHandle_1:271610_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{fe73752f-8456-425d-a975-9332e039964a}_-parentPid_784646_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_5_utility
pentester    786319    6.9    2.3    75099380    192212    pts/14    Rl+    11:00    11:08    02:40:57    claude    <noArgs>
pentester    786370    0.0    0.0    10044    12    pts/15    Ss    11:00    0:00    02:40:56    /usr/bin/zsh    <noArgs>
pentester    786385    0.0    0.0    109364    28    pts/15    Sl+    11:00    0:00    02:40:56    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-110046-786370-pentester.log
pentester    786410    0.0    0.0    35600    24    pts/15    S+    11:00    0:00    02:40:56    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-110046-786370-pentester.log
pentester    786411    0.0    0.0    35612    32    pts/15    S+    11:00    0:00    02:40:56    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-110046-786370-pentester.log
pentester    786415    0.0    0.0    2688    12    pts/17    Ss    11:00    0:00    02:40:56    sh    -c_/usr/bin/zsh
pentester    786417    0.0    0.0    13656    28    pts/17    S+    11:00    0:01    02:40:56    /usr/bin/zsh    <noArgs>
pentester    789928    0.0    0.0    118476    1316    ?    Ssl    11:03    0:00    02:37:43    /usr/bin/speech-dispatcher    -s_-t_0
pentester    789979    0.0    0.0    0    0    ?    Z    11:03    0:00    02:37:42    [sd_espeak-ng-mb]    <defunct>
pentester    789997    0.0    0.0    24216    1552    ?    S    11:03    0:00    02:37:42    /usr/lib/speech-dispatcher-modules/sd_espeak-ng    /etc/speech-dispatcher/modules/espeak-ng.conf
pentester    790007    0.3    0.0    163608    384    ?    Sl    11:04    0:32    02:37:42    /usr/lib/speech-dispatcher-modules/sd_dummy    /etc/speech-dispatcher/modules/dummy.conf
pentester    790010    0.0    0.0    24412    1432    ?    S    11:04    0:00    02:37:42    /usr/lib/speech-dispatcher-modules/sd_espeak-ng    /etc/speech-dispatcher/modules/
pentester    794423    0.0    0.0    10044    12    pts/25    Ss    11:09    0:00    02:32:38    /usr/bin/zsh    <noArgs>
pentester    794431    0.1    0.0    109364    1472    pts/25    Sl+    11:09    0:12    02:32:38    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-110904-794423-pentester.log
pentester    794440    0.0    0.0    35600    404    pts/25    S+    11:09    0:00    02:32:38    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-110904-794423-pentester.log
pentester    794441    0.0    0.0    36152    1832    pts/25    S+    11:09    0:07    02:32:38    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-110904-794423-pentester.log
pentester    794442    0.0    0.0    2688    12    pts/35    Ss    11:09    0:00    02:32:38    sh    -c_/usr/bin/zsh
pentester    794443    0.0    0.0    13856    40    pts/35    S    11:09    0:02    02:32:38    /usr/bin/zsh    <noArgs>
root    823550    0.0    0.0    0    0    ?    I<    11:46    0:00    01:55:20    [kworker/R-tls-strp]    <noArgs>
pentester    831968    0.0    0.0    10044    12    pts/18    Ss    11:57    0:00    01:44:00    /usr/bin/zsh    <noArgs>
pentester    831984    0.0    0.0    109364    880    pts/18    Sl+    11:57    0:00    01:44:00    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-115742-831968-pentester.log
pentester    831985    0.0    0.0    35600    52    pts/18    S+    11:57    0:00    01:44:00    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-115742-831968-pentester.log
pentester    831986    0.0    0.0    35880    936    pts/18    S+    11:57    0:00    01:44:00    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-115742-831968-pentester.log
pentester    831987    0.0    0.0    2688    12    pts/24    Ss    11:57    0:00    01:44:00    sh    -c_/usr/bin/zsh
pentester    831988    0.0    0.0    10340    12    pts/24    S    11:57    0:00    01:44:00    /usr/bin/zsh    <noArgs>
pentester    832045    2.6    2.2    74871896    179232    pts/24    Rl+    11:57    2:45    01:43:57    claude    <noArgs>
pentester    833198    1.8    1.7    2750636    145248    ?    Rl    11:58    1:54    01:42:53    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:40954_-prefMapHandle_1:271610_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{d18f7694-a371-49d0-8290-e4d306f58ac7}_-parentPid_784646_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_89_tab
pentester    833294    0.0    0.1    2478924    16160    ?    Sl    11:58    0:02    01:42:50    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:40954_-prefMapHandle_1:271610_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{f6031589-ceb2-4b9b-a939-1a8bd6ad0f23}_-parentPid_784646_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_90_tab
pentester    833599    0.5    0.3    2533952    26868    ?    Sl    11:59    0:33    01:42:31    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:40954_-prefMapHandle_1:271610_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{473a1906-2ae3-4605-9963-b015db09c7d2}_-parentPid_784646_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_93_tab
pentester    836593    2.2    6.0    3210616    494344    ?    Rl    12:03    2:15    01:38:40    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:40954_-prefMapHandle_1:271610_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{5516217c-8973-41f9-971c-da0b4bd01e3d}_-parentPid_784646_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_97_tab
pentester    843004    18.9    3.0    74926036    244280    pts/35    Rl+    12:10    17:21    01:31:30    claude    <noArgs>
root    850953    0.0    0.0    0    0    ?    I    12:20    0:02    01:21:10    [kworker/1:0-events]    <noArgs>
pentester    866824    0.0    0.0    183184    1088    ?    SLsl    12:41    0:00    59:58    /usr/bin/gnome-keyring-daemon    --foreground_--components=pkcs11,secrets_--control-directory=/run/user/1001/keyring
pentester    871076    0.3    0.2    2505720    22188    ?    Sl    12:47    0:10    54:33    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:41049_-prefMapHandle_1:271610_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{b29039bc-8fcf-408e-bbde-56ccc17f693e}_-parentPid_784646_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_118_tab
root    873894    0.0    0.0    0    0    ?    I    12:50    0:00    51:11    [kworker/2:1-events]    <noArgs>
pentester    877853    0.0    0.0    545424    1564    ?    Sl    12:55    0:00    46:37    mousepad    <noArgs>
pentester    878072    11.0    5.6    5886176    456172    ?    Sl    12:55    5:05    46:18    java    -jar_/usr/share/burpsuite/burpsuite.jar
pentester    878716    2.4    0.4    51014912    37024    ?    SLl    12:56    1:06    45:35    /home/pentester/.BurpSuite/burpbrowser/142.0.7444.175/chrome    --disable-ipc-flooding-protection_--disable-xss-auditor_--disable-bundled-ppapi-flash_--disable-plugins-discovery_--disable-default-apps_--disable-prerender-local-predictor_--disable-breakpad_--disable-crash-reporter_--disable-prerender-local-predictor_--disk-cache-size=0_--disable-settings-window_--disable-notifications_--disable-speech-api_--disable-file-system_--disable-presentation-api_--disable-permissions-api_--disable-new-zip-unpacker_--disable-media-session-api_--no-experiments_--no-events_--no-first-run_--no-default-browser-check_--no-pings_--no-service-autorun_--media-cache-size=0_--use-fake-device-for-media-stream_--dbus-stub_--disable-background-networking_--disable-features=ChromeWhatsNewUI,HttpsUpgrades,ImageServiceObserveSyncDownloadStatus,RenderDocument_--proxy-server=localhost:8080_--proxy-bypass-list=<-loopback>_--user-agent=Mozilla/5.0_(X11;_Linux_x86_64)_AppleWebKit/537.36_(KHTML,_like_Gecko)_Chrome/142.0.0.0_Safari/537.36_--user-data-dir=/home/pentester/.BurpSuite/pre-wired-browser_--ignore-certificate-errors_--disable-features=TrackingProtection3pcd,LensOverlay_--load-extension=/home/pentester/.BurpSuite/burp-chromium-extension_chrome://newtab
pentester    878735    0.0    0.0    50345384    420    ?    Sl    12:56    0:00    45:34    /home/pentester/.BurpSuite/burpbrowser/142.0.7444.175/chrome_crashpad_handler    --monitor-self_--monitor-self-annotation=ptype=crashpad-handler_--database=/home/pentester/.config/chromium/Crash_Reports_--annotation=lsb-release=Kali_GNU/Linux_Rolling_--annotation=plat=Linux_--annotation=prod=Chrome_Linux_--annotation=ver=142.0.7444.175_--initial-client-fd=5_--shared-client-connection
pentester    878737    0.0    0.0    33559956    320    ?    S    12:56    0:00    45:34    /home/pentester/.BurpSuite/burpbrowser/142.0.7444.175/chrome_crashpad_handler    --no-periodic-tasks_--monitor-self-annotation=ptype=crashpad-handler_--database=/home/pentester/.config/chromium/Crash_Reports_--annotation=lsb-release=Kali_GNU/Linux_Rolling_--annotation=plat=Linux_--annotation=prod=Chrome_Linux_--annotation=ver=142.0.7444.175_--initial-client-fd=4_--shared-client-connection
pentester    878741    0.0    0.1    33871132    13880    ?    S    12:56    0:00    45:34    /home/pentester/.BurpSuite/burpbrowser/142.0.7444.175/chrome    --type=zygote_--no-zygote-sandbox_--crashpad-handler-pid=878735_--enable-crash-reporter=,_--user-agent=Mozilla/5.0_(X11;_Linux_x86_64)_AppleWebKit/537.36_(KHTML,_like_Gecko)_Chrome/142.0.0.0_Safari/537.36_--user-data-dir=/home/pentester/.BurpSuite/pre-wired-browser_--change-stack-guard-on-fork=enable
pentester    878742    0.0    0.1    33871124    13796    ?    S    12:56    0:00    45:34    /home/pentester/.BurpSuite/burpbrowser/142.0.7444.175/chrome    --type=zygote_--crashpad-handler-pid=878735_--enable-crash-reporter=,_--user-agent=Mozilla/5.0_(X11;_Linux_x86_64)_AppleWebKit/537.36_(KHTML,_like_Gecko)_Chrome/142.0.0.0_Safari/537.36_--user-data-dir=/home/pentester/.BurpSuite/pre-wired-browser_--change-stack-guard-on-fork=enable
pentester    878752    0.0    0.1    33871152    13836    ?    S    12:56    0:00    45:34    /home/pentester/.BurpSuite/burpbrowser/142.0.7444.175/chrome    --type=zygote_--crashpad-handler-pid=878735_--enable-crash-reporter=,_--user-agent=Mozilla/5.0_(X11;_Linux_x86_64)_AppleWebKit/537.36_(KHTML,_like_Gecko)_Chrome/142.0.0.0_Safari/537.36_--user-data-dir=/home/pentester/.BurpSuite/pre-wired-browser_--change-stack-guard-on-fork=enable
pentester    878777    0.9    0.3    34258308    25940    ?    Rl    12:56    0:27    45:33    /home/pentester/.BurpSuite/burpbrowser/142.0.7444.175/chrome    --type=gpu-process_--disable-breakpad_--ozone-platform=x11_--crashpad-handler-pid=878735_--enable-crash-reporter=,_--user-agent=Mozilla/5.0_(X11;_Linux_x86_64)_AppleWebKit/537.36_(KHTML,_like_Gecko)_Chrome/142.0.0.0_Safari/537.36_--user-data-dir=/home/pentester/.BurpSuite/pre-wired-browser_--change-stack-guard-on-fork=enable_--gpu-preferences=UAAAAAAAAAAgAQAEAAAAAAAAAAAAAMAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYAAAAAAAAABgAAAAAAAAAAQAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA_--shared-files_--metrics-shmem-handle=4,i,4908930027687253040,6821831884983900679,262144_--field-trial-handle=3,i,14837279118217079040,14310382692496164058,262144_--disable-features=LensOverlay,TrackingProtection3pcd_--variations-seed-version_--trace-process-track-uuid=3190708988185955192
pentester    878780    0.6    0.0    33946004    4360    ?    Sl    12:56    0:18    45:33    /home/pentester/.BurpSuite/burpbrowser/142.0.7444.175/chrome    --type=utility_--utility-sub-type=network.mojom.NetworkService_--lang=en-US_--service-sandbox-type=network_--ignore-certificate-errors_--use-fake-device-for-media-stream_--ignore-certificate-errors_--crashpad-handler-pid=878735_--enable-crash-reporter=,_--user-agent=Mozilla/5.0_(X11;_Linux_x86_64)_AppleWebKit/537.36_(KHTML,_like_Gecko)_Chrome/142.0.0.0_Safari/537.36_--user-data-dir=/home/pentester/.BurpSuite/pre-wired-browser_--change-stack-guard-on-fork=enable_--shared-files=network_parent_dirs_pipe:100,v8_context_snapshot_data:101_--metrics-shmem-handle=4,i,11656368079175106243,10617856315534368388,524288_--field-trial-handle=3,i,14837279118217079040,14310382692496164058,262144_--disable-features=LensOverlay,TrackingProtection3pcd_--variations-seed-version_--trace-process-track-uuid=3190708989122997041
pentester    878790    0.0    0.0    33871908    1792    ?    S    12:56    0:00    45:32    /home/pentester/.BurpSuite/burpbrowser/142.0.7444.175/chrome    --type=broker
pentester    878801    0.2    0.1    33929444    14608    ?    Sl    12:56    0:06    45:32    /home/pentester/.BurpSuite/burpbrowser/142.0.7444.175/chrome    --type=utility_--utility-sub-type=storage.mojom.StorageService_--lang=en-US_--service-sandbox-type=utility_--ignore-certificate-errors_--use-fake-device-for-media-stream_--ignore-certificate-errors_--crashpad-handler-pid=878735_--enable-crash-reporter=,_--user-agent=Mozilla/5.0_(X11;_Linux_x86_64)_AppleWebKit/537.36_(KHTML,_like_Gecko)_Chrome/142.0.0.0_Safari/537.36_--user-data-dir=/home/pentester/.BurpSuite/pre-wired-browser_--change-stack-guard-on-fork=enable_--shared-files=v8_context_snapshot_data:100_--metrics-shmem-handle=4,i,18162077295968341064,10793203662428589291,524288_--field-trial-handle=3,i,14837279118217079040,14310382692496164058,262144_--disable-features=LensOverlay,TrackingProtection3pcd_--variations-seed-version_--trace-process-track-uuid=3190708990060038890
pentester    878894    0.2    0.0    0    0    ?    Z    12:56    0:05    45:29    [chrome]    <defunct>
pentester    878995    0.2    0.1    1459619860    15280    ?    Sl    12:56    0:07    45:24    /home/pentester/.BurpSuite/burpbrowser/142.0.7444.175/chrome    --type=renderer_--crashpad-handler-pid=878735_--enable-crash-reporter=,_--user-agent=Mozilla/5.0_(X11;_Linux_x86_64)_AppleWebKit/537.36_(KHTML,_like_Gecko)_Chrome/142.0.0.0_Safari/537.36_--user-data-dir=/home/pentester/.BurpSuite/pre-wired-browser_--change-stack-guard-on-fork=enable_--disable-breakpad_--disable-file-system_--disable-notifications_--disable-presentation-api_--disable-speech-api_--ozone-platform=x11_--disable-gpu-compositing_--lang=en-US_--num-raster-threads=2_--enable-main-frame-before-activation_--renderer-client-id=10_--time-ticks-at-unix-epoch=-1768000825142585_--launch-time-ticks=66952597033_--shared-files=v8_context_snapshot_data:100_--metrics-shmem-handle=4,i,15490703285526015338,12667877223831233540,2097152_--field-trial-handle=3,i,14837279118217079040,14310382692496164058,262144_--disable-features=LensOverlay,TrackingProtection3pcd_--variations-seed-version_--trace-process-track-uuid=3190708995682289984
pentester    879063    0.2    0.1    1459619860    15268    ?    Rl    12:56    0:07    45:19    /home/pentester/.BurpSuite/burpbrowser/142.0.7444.175/chrome    --type=renderer_--crashpad-handler-pid=878735_--enable-crash-reporter=,_--user-agent=Mozilla/5.0_(X11;_Linux_x86_64)_AppleWebKit/537.36_(KHTML,_like_Gecko)_Chrome/142.0.0.0_Safari/537.36_--user-data-dir=/home/pentester/.BurpSuite/pre-wired-browser_--change-stack-guard-on-fork=enable_--disable-breakpad_--disable-file-system_--disable-notifications_--disable-presentation-api_--disable-speech-api_--ozone-platform=x11_--disable-gpu-compositing_--lang=en-US_--num-raster-threads=2_--enable-main-frame-before-activation_--renderer-client-id=11_--time-ticks-at-unix-epoch=-1768000825142585_--launch-time-ticks=66957827835_--shared-files=v8_context_snapshot_data:100_--metrics-shmem-handle=4,i,11033080630262657228,8659830338002391568,2097152_--field-trial-handle=3,i,14837279118217079040,14310382692496164058,262144_--disable-features=LensOverlay,TrackingProtection3pcd_--variations-seed-version_--trace-process-track-uuid=3190708996619331833
pentester    880387    0.0    0.0    10044    28    pts/36    Ss    12:57    0:00    43:43    /usr/bin/zsh    <noArgs>
pentester    880407    0.0    0.0    109364    1860    pts/36    Sl+    12:57    0:00    43:42    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-125759-880387-pentester.log
pentester    880409    0.0    0.0    35600    1064    pts/36    S+    12:57    0:00    43:42    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-125759-880387-pentester.log
pentester    880410    0.0    0.0    35744    2052    pts/36    S+    12:57    0:00    43:42    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-125759-880387-pentester.log
pentester    880411    0.0    0.0    2688    12    pts/37    Ss    12:57    0:00    43:42    sh    -c_/usr/bin/zsh
pentester    880412    0.0    0.0    10332    16    pts/37    S    12:57    0:00    43:42    /usr/bin/zsh    <noArgs>
pentester    880443    3.1    3.2    74799952    262976    pts/37    Rl+    12:58    1:22    43:40    claude    <noArgs>
pentester    883652    0.1    0.3    2527152    25552    ?    Sl    13:01    0:03    39:57    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:43866_-prefMapHandle_1:271610_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{be2d4980-a40c-4c49-b27a-9d7adc773d09}_-parentPid_784646_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_129_tab
root    884693    0.0    0.0    0    0    ?    I    13:02    0:00    38:46    [kworker/u20:1-flush-254:0]    <noArgs>
root    884694    0.0    0.0    0    0    ?    I    13:02    0:00    38:46    [kworker/u20:2-kvfree_rcu_reclaim]    <noArgs>
pentester    884790    0.0    0.0    10044    772    pts/38    Ss    13:03    0:00    38:37    /usr/bin/zsh    <noArgs>
pentester    884801    0.0    0.0    109364    4180    pts/38    Sl+    13:03    0:00    38:37    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-130305-884790-pentester.log
pentester    884810    0.0    0.0    35600    3572    pts/38    S+    13:03    0:00    38:37    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-130305-884790-pentester.log
pentester    884811    0.0    0.0    35612    4012    pts/38    S+    13:03    0:00    38:37    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-130305-884790-pentester.log
pentester    884812    0.0    0.0    2688    68    pts/39    Ss    13:03    0:00    38:37    sh    -c_/usr/bin/zsh
pentester    884813    0.0    0.0    10436    1044    pts/39    S    13:03    0:00    38:37    /usr/bin/zsh    <noArgs>
pentester    884953    0.6    2.9    3108344    238864    ?    Sl    13:03    0:14    38:27    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:41050_-prefMapHandle_1:271610_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{712bd310-84ad-400e-b4c0-fb64ebb6a3d9}_-parentPid_784646_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_130_tab
pentester    885366    0.0    0.0    10044    304    pts/40    Ss    13:03    0:00    38:05    /usr/bin/zsh    <noArgs>
pentester    885374    0.0    0.0    109364    3884    pts/40    Sl+    13:03    0:00    38:05    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-130336-885366-pentester.log
pentester    885376    0.0    0.0    35600    3176    pts/40    S+    13:03    0:00    38:05    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-130336-885366-pentester.log
pentester    885377    0.0    0.0    35612    3796    pts/40    S+    13:03    0:00    38:05    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-130336-885366-pentester.log
pentester    885378    0.0    0.0    2688    56    pts/41    Ss    13:03    0:00    38:05    sh    -c_/usr/bin/zsh
pentester    885379    0.0    0.0    10428    1536    pts/41    S    13:03    0:00    38:05    /usr/bin/zsh    <noArgs>
pentester    887831    0.0    0.0    7752    172    ?    Ss    13:06    0:00    35:18    /usr/bin/zsh    -c_-l_source_/home/pentester/.claude/shell-snapshots/snapshot-zsh-1768065013425-7l2gsw.sh_&&_setopt_NO_EXTENDED_GLOB_2>/dev/null_||_true_&&_eval_'nmap_--badsum_-p-_-Pn_10.0.1.14_2>&1_<_/dev/null_|_head_-30'_&&_pwd_-P_>|_/tmp/claude-ce39-cwd
pentester    887841    1.0    0.0    28800    6648    ?    R    13:06    0:23    35:18    /usr/lib/nmap/nmap    --privileged_--badsum_-p-_-Pn_10.0.1.14
pentester    887842    0.0    0.0    5596    76    ?    S    13:06    0:00    35:18    head    -30
pentester    891675    0.0    0.0    3320    180    pts/39    S+    13:10    0:00    30:46    netcat    10.0.1.10_6768
pentester    893136    3.1    0.8    2568812    68628    ?    Rl    13:12    0:55    28:47    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:41091_-prefMapHandle_1:271610_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{42ea54ab-c3d8-44ef-9fe8-6ed2c1f50dde}_-parentPid_784646_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_137_tab
pentester    894235    0.0    0.0    3320    168    pts/41    S+    13:14    0:00    27:27    nc    -lnvp_4444
pentester    894646    0.0    0.0    10044    1712    pts/42    Ss    13:14    0:00    26:48    /usr/bin/zsh    <noArgs>
pentester    894654    0.0    0.1    109364    12868    pts/42    Sl+    13:14    0:00    26:48    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-131454-894646-pentester.log
pentester    894655    0.0    0.1    35600    12800    pts/42    S+    13:14    0:00    26:48    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-131454-894646-pentester.log
pentester    894656    0.0    0.1    35876    13028    pts/42    S+    13:14    0:00    26:48    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-131454-894646-pentester.log
pentester    894657    0.0    0.0    2688    120    pts/45    Ss    13:14    0:00    26:48    sh    -c_/usr/bin/zsh
pentester    894658    0.0    0.0    10336    2072    pts/45    S    13:14    0:00    26:48    /usr/bin/zsh    <noArgs>
pentester    894726    5.1    4.8    74834204    398592    pts/45    Rl+    13:14    1:22    26:44    claude    <noArgs>
root    895235    0.0    0.0    0    0    ?    I    13:15    0:00    26:10    [kworker/3:2-events_freezable_pwr_efficient]    <noArgs>
root    896763    0.0    0.0    0    0    ?    I    13:17    0:00    24:17    [kworker/u17:0-kvfree_rcu_reclaim]    <noArgs>
pentester    897328    0.0    0.0    10044    1700    pts/46    Ss    13:18    0:00    23:31    /usr/bin/zsh    <noArgs>
pentester    897337    0.0    0.1    109364    12920    pts/46    Sl+    13:18    0:00    23:31    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-131811-897328-pentester.log
pentester    897349    0.0    0.1    35600    12868    pts/46    S+    13:18    0:00    23:30    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-131811-897328-pentester.log
pentester    897350    0.0    0.1    35612    12872    pts/46    S+    13:18    0:00    23:30    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-131811-897328-pentester.log
pentester    897351    0.0    0.0    2688    120    pts/47    Ss    13:18    0:00    23:30    sh    -c_/usr/bin/zsh
pentester    897352    0.0    0.0    13816    2492    pts/47    S    13:18    0:00    23:30    /usr/bin/zsh    <noArgs>
root    897504    0.0    0.0    0    0    ?    I    13:18    0:00    23:20    [kworker/u17:6-writeback]    <noArgs>
pentester    898268    0.0    0.0    3320    180    pts/47    S+    13:19    0:00    22:32    netcat    10.0.1.10_9000
root    898323    0.0    0.0    0    0    ?    I    13:19    0:00    22:26    [kworker/0:1-events]    <noArgs>
pentester    899254    0.0    0.0    10044    1684    pts/48    Ss    13:20    0:00    21:05    /usr/bin/zsh    <noArgs>
pentester    899271    0.0    0.1    109364    11696    pts/48    Sl+    13:20    0:00    21:04    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-132037-899254-pentester.log
pentester    899286    0.0    0.1    35600    11728    pts/48    S+    13:20    0:00    21:04    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-132037-899254-pentester.log
pentester    899287    0.0    0.1    35612    11356    pts/48    S+    13:20    0:00    21:04    /usr/bin/python3    /usr/bin/asciinema_rec_--stdin_-q_-c_/usr/bin/zsh_/home/pentester/participant_env/verbose-log/logs/command-logs-20260110-132037-899254-pentester.log
pentester    899288    0.0    0.0    2688    24    pts/49    Ss    13:20    0:00    21:04    sh    -c_/usr/bin/zsh
pentester    899289    0.0    0.0    10332    356    pts/49    S    13:20    0:00    21:04    /usr/bin/zsh    <noArgs>
pentester    899317    4.4    3.5    74692896    291624    pts/49    Rl+    13:20    0:56    21:03    claude    <noArgs>
root    899327    0.0    0.0    0    0    ?    I    13:20    0:00    21:02    [kworker/u18:5-flush-254:0]    <noArgs>
root    899409    0.0    0.0    0    0    ?    I    13:20    0:00    21:00    [kworker/u19:2-flush-254:0]    <noArgs>
root    900137    0.0    0.0    0    0    ?    I    13:22    0:00    19:42    [kworker/2:2-ata_sff]    <noArgs>
root    900344    0.0    0.0    0    0    ?    I    13:22    0:00    19:31    [kworker/u19:4-flush-254:0]    <noArgs>
root    901008    0.0    0.0    0    0    ?    I    13:23    0:00    18:41    [kworker/u18:6-flush-254:0]    <noArgs>
pentester    902938    2.2    0.2    2450684    17552    ?    Sl    13:29    0:15    11:43    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:41092_-prefMapHandle_1:271610_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{0d91879a-8a62-4524-ab99-3be61737b632}_-parentPid_784646_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_147_tab
root    902940    0.0    0.0    0    0    ?    I    13:29    0:00    11:43    [kworker/0:0-events]    <noArgs>
root    902973    0.0    0.0    0    0    ?    I    13:29    0:00    11:43    [kworker/u20:3-writeback]    <noArgs>
root    903006    0.0    0.0    0    0    ?    I    13:29    0:00    11:42    [kworker/u19:1-flush-254:0]    <noArgs>
root    903007    0.0    0.0    0    0    ?    I    13:30    0:00    11:42    [kworker/3:1-events]    <noArgs>
xrdp    903189    0.7    0.3    92252    30044    ?    S    13:34    0:03    07:41    /usr/sbin/xrdp    <noArgs>
pentester    903263    3.3    7.9    1501672    644088    ?    Rl    13:34    0:15    07:38    ffmpeg    -video_size_2560x1600_-framerate_30_-f_x11grab_-i_:10.0_-preset_ultrafast_-movflags_+faststart_-t_60_/home/pentester/Stanford-university/logging/participant_env/screen-record/logs/in_progress/screen_recording_2026-01-10_13-34-04.mp4
root    903352    0.0    0.0    0    0    ?    I    13:34    0:00    07:36    [kworker/u18:1-flush-254:0]    <noArgs>
pentester    903503    0.0    0.0    11212    444    ?    S    13:34    0:00    07:28    wmctrl    -l
pentester    903504    0.0    0.0    7676    168    ?    S    13:34    0:00    07:28    logger    -t_wintitles
pentester    903509    0.0    0.0    11212    464    ?    S    13:34    0:00    07:28    wmctrl    -l
pentester    903510    0.0    0.0    7676    168    ?    S    13:34    0:00    07:28    logger    -t_wintitles
root    903628    0.0    0.0    0    0    ?    I    13:34    0:00    06:56    [kworker/1:2-ata_sff]    <noArgs>
root    903631    0.0    0.0    0    0    ?    I    13:34    0:00    06:52    [kworker/u17:1-flush-254:0]    <noArgs>
root    903908    0.0    0.0    2688    108    ?    S    13:36    0:00    05:19    /bin/sh    -c_/opt/splunkforwarder/etc/apps/uf_sysmon_linux_install_force/bin/install_sysmon.sh
root    903913    0.1    0.0    7180    308    ?    S    13:36    0:00    05:19    /bin/bash    /opt/splunkforwarder/etc/apps/uf_sysmon_linux_install_force/bin/install_sysmon.sh
root    904070    5.1    0.0    20596    1136    ?    S    13:38    0:09    02:58    /usr/bin/apt-get    update
root    904126    1.1    0.0    2688    120    ?    Ss    13:39    0:01    02:35    /bin/sh    -e_/usr/lib/php/sessionclean
root    904254    0.0    0.0    2688    112    ?    S    13:39    0:00    02:06    /bin/sh    -e_/usr/lib/php/sessionclean
root    904256    0.0    0.0    18084    116    ?    S    13:39    0:00    02:06    sort    -rn_-t:_-k2,2
root    904258    0.0    0.0    18084    116    ?    S    13:39    0:00    02:06    sort    -u_-t:_-k_1,1
root    904259    0.0    0.0    2688    108    ?    S    13:39    0:00    02:06    /bin/sh    -e_/usr/lib/php/sessionclean
root    904293    5.9    0.0    38980    3352    ?    D    13:39    0:07    01:59    /usr/bin/php8.4    -c_/etc/php/8.4/apache2/php.ini_-d_error_reporting='~E_ALL'_-r_foreach(ini_get_all("session")_as_$k_=>_$v)_echo_"$k=".$v["local_value"]."\n";
root    904302    0.0    0.0    0    0    ?    I    13:39    0:00    01:45    [kworker/1:1-ata_sff]    <noArgs>
pentester    904345    3.2    0.0    307644    776    ?    Ssl    13:40    0:02    01:25    /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd    <noArgs>
root    904400    0.0    0.0    2688    120    ?    S    13:40    0:00    00:42    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    904402    0.5    0.0    2688    280    ?    S    13:41    0:00    00:41    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    904488    2.8    0.0    2688    556    ?    S    13:41    0:00    00:00    /bin/sh    /usr/bin/lsb_release
root    904490    37.7    0.0    10032    2580    ?    R    13:41    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    904491    1.9    0.0    5592    304    ?    S    13:41    0:00    00:00    tee    /dev/null
root    904492    13.4    0.0    9472    712    ?    S    13:41    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}