Advertisement
Guest User

Untitled

a guest
Apr 26th, 2018
87
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Bash 10.68 KB | None | 0 0
  1. danielpops@host:~ [00:34:09]
  2. $ sudo ls -ult /var/osquery/osquery.db/ | wc -l
  3. 61566
  4. danielpops@host:~ [00:38:56]
  5. $ sudo ls -ult /var/osquery/osquery.db/ | head -100
  6. total 268M
  7. -rw-r--r-- 1 root root 1012 Apr 26 00:38 679003.sst
  8. -rw-r--r-- 1 root root 1012 Apr 26 00:38 675074.sst
  9. -rw-r--r-- 1 root root 1.1K Apr 26 00:38 455765.sst
  10. -rw-r--r-- 1 root root 1.1K Apr 26 00:38 353732.sst
  11. -rw-r--r-- 1 root root 1.1K Apr 26 00:38 334159.sst
  12. -rw-r--r-- 1 root root  938 Apr 26 00:37 113605.sst
  13. -rw-r--r-- 1 root root  976 Apr 26 00:37 087493.sst
  14. -rw-r--r-- 1 root root  954 Apr 26 00:37 050921.sst
  15. -rw-r--r-- 1 root root 1.1K Apr 26 00:37 859061.sst
  16. -rw-r--r-- 1 root root 1.1K Apr 26 00:37 812067.sst
  17. -rw-r--r-- 1 root root 1016 Apr 26 00:37 729877.sst
  18. -rw-r--r-- 1 root root 1.7K Apr 26 00:37 718162.sst
  19. -rw-r--r-- 1 root root  991 Apr 26 00:37 561517.sst
  20. -rw-r--r-- 1 root root 1.2K Apr 26 00:37 534082.sst
  21. -rw-r--r-- 1 root root  954 Apr 26 00:37 412668.sst
  22. -rw-r--r-- 1 root root  954 Apr 26 00:37 126690.sst
  23. -rw-r--r-- 1 root root 1004 Apr 26 00:37 1015311.sst
  24. -rw-r--r-- 1 root root  991 Apr 26 00:37 749445.sst
  25. -rw-r--r-- 1 root root 1.1K Apr 26 00:37 741632.sst
  26. -rw-r--r-- 1 root root 1.1K Apr 26 00:37 436179.sst
  27. -rw-r--r-- 1 root root 1.1K Apr 26 00:37 393039.sst
  28. -rw-r--r-- 1 root root 2.6K Apr 26 00:37 318373.sst
  29. -rw-r--r-- 1 root root  991 Apr 26 00:37 310502.sst
  30. -rw-r--r-- 1 root root 1.2K Apr 26 00:37 302600.sst
  31. -rw-r--r-- 1 root root 1.3K Apr 26 00:37 294761.sst
  32. -rw-r--r-- 1 root root 7.4K Apr 26 00:37 148466.sst
  33. -rw-r--r-- 1 root root 1.1K Apr 26 00:37 135382.sst
  34. -rw-r--r-- 1 root root 7.2K Apr 26 00:37 074361.sst
  35. -rw-r--r-- 1 root root 1010 Apr 26 00:37 067967.sst
  36. -rw-r--r-- 1 root root  954 Apr 26 00:37 780804.sst
  37. -rw-r--r-- 1 root root  978 Apr 26 00:37 765112.sst
  38. -rw-r--r-- 1 root root  954 Apr 26 00:37 577169.sst
  39. -rw-r--r-- 1 root root 1.1K Apr 26 00:37 538015.sst
  40. -rw-r--r-- 1 root root 1.1K Apr 26 00:37 255512.sst
  41. -rw-r--r-- 1 root root 1.2K Apr 26 00:37 239754.sst
  42. -rw-r--r-- 1 root root  929 Apr 26 00:37 157219.sst
  43. -rw-r--r-- 1 root root 1.1K Apr 26 00:37 038124.sst
  44. -rw-r--r-- 1 root root 1.1K Apr 26 00:37 1003582.sst
  45. -rw-r--r-- 1 root root 1.1K Apr 26 00:37 964578.sst
  46. -rw-r--r-- 1 root root  967 Apr 26 00:36 1030977.sst
  47. -rw-r--r-- 1 root root 1013 Apr 26 00:36 823841.sst
  48. -rw-r--r-- 1 root root 1.1K Apr 26 00:36 761188.sst
  49. -rw-r--r-- 1 root root  976 Apr 26 00:36 518444.sst
  50. -rw-r--r-- 1 root root  991 Apr 26 00:36 498886.sst
  51. -rw-r--r-- 1 root root 1.8K Apr 26 00:36 487106.sst
  52. -rw-r--r-- 1 root root 1.7K Apr 26 00:36 459676.sst
  53. -rw-r--r-- 1 root root 8.1K Apr 26 00:36 214101.sst
  54. -rw-r--r-- 1 root root 1.1K Apr 26 00:36 205348.sst
  55. -rw-r--r-- 1 root root  954 Apr 26 00:36 196631.sst
  56. -rw-r--r-- 1 root root  975 Apr 26 00:36 174712.sst
  57. -rw-r--r-- 1 root root 2.6K Apr 26 00:36 995791.sst
  58. -rw-r--r-- 1 root root  991 Apr 26 00:36 440074.sst
  59. -rw-r--r-- 1 root root 1.1K Apr 26 00:36 271159.sst
  60. -rw-r--r-- 1 root root 7.0K Apr 26 00:36 263326.sst
  61. -rw-r--r-- 1 root root 1011 Apr 26 00:36 247644.sst
  62. -rw-r--r-- 1 root root 1.1K Apr 26 00:36 165968.sst
  63. -rw-r--r-- 1 root root 2.5K Apr 26 00:36 984113.sst
  64. -rw-r--r-- 1 root root 2.7K Apr 26 00:36 972367.sst
  65. -rw-r--r-- 1 root root 1.2K Apr 26 00:36 952838.sst
  66. -rw-r--r-- 1 root root 2.2K Apr 26 00:36 855162.sst
  67. -rw-r--r-- 1 root root 1011 Apr 26 00:36 671142.sst
  68. -rw-r--r-- 1 root root 1.2K Apr 26 00:36 122342.sst
  69. -rw-r--r-- 1 root root  994 Apr 26 00:35 843455.sst
  70. -rw-r--r-- 1 root root 1.1K Apr 26 00:35 831667.sst
  71. -rw-r--r-- 1 root root 1.8K Apr 26 00:35 800320.sst
  72. -rw-r--r-- 1 root root  966 Apr 26 00:35 776894.sst
  73. -rw-r--r-- 1 root root 1012 Apr 26 00:35 706431.sst
  74. -rw-r--r-- 1 root root  991 Apr 26 00:35 702440.sst
  75. -rw-r--r-- 1 root root 1.2K Apr 26 00:35 424407.sst
  76. -rw-r--r-- 1 root root  954 Apr 26 00:35 278999.sst
  77. -rw-r--r-- 1 root root 7.6K Apr 26 00:35 035989.sst
  78. -rw-r--r-- 1 root root 2.6K Apr 26 00:35 1007518.sst
  79. -rw-r--r-- 1 root root 2.5K Apr 26 00:35 960661.sst
  80. -rw-r--r-- 1 root root 1.1K Apr 26 00:35 937225.sst
  81. -rw-r--r-- 1 root root  955 Apr 26 00:35 870804.sst
  82. -rw-r--r-- 1 root root 1013 Apr 26 00:35 565420.sst
  83. -rw-r--r-- 1 root root 1.8K Apr 26 00:35 444020.sst
  84. -rw-r--r-- 1 root root 1.1K Apr 26 00:35 286845.sst
  85. -rw-r--r-- 1 root root 5.6K Apr 26 00:35 109259.sst
  86. -rw-r--r-- 1 root root 1.2K Apr 26 00:35 096208.sst
  87. -rw-r--r-- 1 root root 1000 Apr 26 00:35 545837.sst
  88. -rw-r--r-- 1 root root 1003 Apr 26 00:35 541909.sst
  89. -rw-r--r-- 1 root root  991 Apr 26 00:35 522376.sst
  90. -rw-r--r-- 1 root root 1.3K Apr 26 00:35 502780.sst
  91. -rw-r--r-- 1 root root 1009 Apr 26 00:35 235863.sst
  92. -rw-r--r-- 1 root root 1.1K Apr 26 00:35 227291.sst
  93. -rw-r--r-- 1 root root 1.3K Apr 26 00:35 1034896.sst
  94. -rw-r--r-- 1 root root  991 Apr 26 00:35 745553.sst
  95. -rw-r--r-- 1 root root  966 Apr 26 00:35 667268.sst
  96. -rw-r--r-- 1 root root 2.4K Apr 26 00:35 345860.sst
  97. -rw-r--r-- 1 root root 1.1K Apr 26 00:35 338018.sst
  98. -rw-r--r-- 1 root root  990 Apr 26 00:35 330171.sst
  99. -rw-r--r-- 1 root root  947 Apr 26 00:35 065827.sst
  100. -rw-r--r-- 1 root root 1.2K Apr 26 00:35 055177.sst
  101. -rw-r--r-- 1 root root 1.1K Apr 26 00:35 1023142.sst
  102. -rw-r--r-- 1 root root 1.2K Apr 26 00:35 808126.sst
  103. -rw-r--r-- 1 root root  991 Apr 26 00:35 796409.sst
  104. -rw-r--r-- 1 root root 1.8K Apr 26 00:35 569341.sst
  105. -rw-r--r-- 1 root root 1.7K Apr 26 00:35 506668.sst
  106. danielpops@host:~ [00:38:02]
  107. $ sudo ls -ult /var/osquery/osquery.db/ | tail -100
  108. -rw-r--r-- 1 root root 2.0K Apr 25 00:39 549787.sst
  109. -rw-r--r-- 1 root root 1.1K Apr 25 00:39 545850.sst
  110. -rw-r--r-- 1 root root  978 Apr 25 00:39 526282.sst
  111. -rw-r--r-- 1 root root  953 Apr 25 00:39 306551.sst
  112. -rw-r--r-- 1 root root  953 Apr 25 00:39 298670.sst
  113. -rw-r--r-- 1 root root 3.6K Apr 25 00:39 290806.sst
  114. -rw-r--r-- 1 root root  953 Apr 25 00:39 259400.sst
  115. -rw-r--r-- 1 root root 1.1K Apr 25 00:39 251587.sst
  116. -rw-r--r-- 1 root root  953 Apr 25 00:39 243701.sst
  117. -rw-r--r-- 1 root root  950 Apr 25 00:39 044521.sst
  118. -rw-r--r-- 1 root root  973 Apr 25 00:39 033853.sst
  119. -rw-r--r-- 1 root root 1.2K Apr 25 00:39 031726.sst
  120. -rw-r--r-- 1 root root 1.1K Apr 25 00:39 815994.sst
  121. -rw-r--r-- 1 root root  954 Apr 25 00:39 753371.sst
  122. -rw-r--r-- 1 root root  954 Apr 25 00:39 737707.sst
  123. -rw-r--r-- 1 root root 1.8K Apr 25 00:39 510607.sst
  124. -rw-r--r-- 1 root root 1.1K Apr 25 00:39 451867.sst
  125. -rw-r--r-- 1 root root 1.1K Apr 25 00:39 917782.sst
  126. -rw-r--r-- 1 root root 2.4K Apr 25 00:39 913905.sst
  127. -rw-r--r-- 1 root root 1.2K Apr 25 00:39 902187.sst
  128. -rw-r--r-- 1 root root 1.1K Apr 25 00:39 862986.sst
  129. -rw-r--r-- 1 root root 1.2K Apr 25 00:39 839507.sst
  130. -rw-r--r-- 1 root root 1.8K Apr 25 00:39 827783.sst
  131. -rw-r--r-- 1 root root 1.1K Apr 25 00:39 788617.sst
  132. -rw-r--r-- 1 root root 1.1K Apr 25 00:39 659481.sst
  133. -rw-r--r-- 1 root root 2.6K Apr 25 00:39 655540.sst
  134. -rw-r--r-- 1 root root 1.1K Apr 25 00:39 651620.sst
  135. -rw-r--r-- 1 root root 2.6K Apr 25 00:39 620282.sst
  136. -rw-r--r-- 1 root root  987 Apr 25 00:39 596759.sst
  137. -rw-r--r-- 1 root root  954 Apr 25 00:39 592835.sst
  138. -rw-r--r-- 1 root root  954 Apr 25 00:39 553712.sst
  139. -rw-r--r-- 1 root root  966 Apr 25 00:39 479251.sst
  140. -rw-r--r-- 1 root root  954 Apr 25 00:39 377342.sst
  141. -rw-r--r-- 1 root root 1.0K Apr 25 00:39 357670.sst
  142. -rw-r--r-- 1 root root 1.1K Apr 25 00:39 117970.sst
  143. -rw-r--r-- 1 root root 1.2K Apr 25 00:39 091836.sst
  144. -rw-r--r-- 1 root root  966 Apr 25 00:39 053052.sst
  145. -rw-r--r-- 1 root root 1.1K Apr 25 00:39 976278.sst
  146. -rw-r--r-- 1 root root  955 Apr 25 00:39 968481.sst
  147. -rw-r--r-- 1 root root  992 Apr 25 00:39 898268.sst
  148. -rw-r--r-- 1 root root  991 Apr 25 00:39 690717.sst
  149. -rw-r--r-- 1 root root 2.4K Apr 25 00:39 585016.sst
  150. -rw-r--r-- 1 root root 1016 Apr 25 00:39 369490.sst
  151. -rw-r--r-- 1 root root 1.1K Apr 25 00:39 282908.sst
  152. -rw-r--r-- 1 root root 7.9K Apr 25 00:39 267245.sst
  153. -rw-r--r-- 1 root root  988 Apr 25 00:39 131054.sst
  154. -rw-r--r-- 1 root root 1.1K Apr 25 00:39 104926.sst
  155. -rw-r--r-- 1 root root 1.2K Apr 25 00:39 042388.sst
  156. -rw-r--r-- 1 root root 1014 Apr 25 00:39 1011404.sst
  157. -rw-r--r-- 1 root root  955 Apr 25 00:39 999697.sst
  158. -rw-r--r-- 1 root root 1.6K Apr 25 00:39 910004.sst
  159. -rw-r--r-- 1 root root 1.7K Apr 25 00:39 686825.sst
  160. -rw-r--r-- 1 root root 1.1K Apr 25 00:39 647705.sst
  161. -rw-r--r-- 1 root root 1.1K Apr 25 00:39 643809.sst
  162. -rw-r--r-- 1 root root 1.1K Apr 25 00:39 632052.sst
  163. -rw-r--r-- 1 root root 1.1K Apr 25 00:39 628111.sst
  164. -rw-r--r-- 1 root root 1.2K Apr 25 00:39 624199.sst
  165. -rw-r--r-- 1 root root 1.1K Apr 25 00:39 612424.sst
  166. -rw-r--r-- 1 root root 1.1K Apr 25 00:39 608499.sst
  167. -rw-r--r-- 1 root root 2.5K Apr 25 00:39 604584.sst
  168. -rw-r--r-- 1 root root 1.1K Apr 25 00:38 161634.sst
  169. -rw-r--r-- 1 root root  929 Apr 25 00:38 139757.sst
  170. -rw-r--r-- 1 root root  991 Apr 25 00:38 070104.sst
  171. -rw-r--r-- 1 root root 1.9K Apr 25 00:38 784713.sst
  172. -rw-r--r-- 1 root root  991 Apr 25 00:38 494958.sst
  173. -rw-r--r-- 1 root root 1.1K Apr 25 00:38 389129.sst
  174. -rw-r--r-- 1 root root  975 Apr 25 00:38 170348.sst
  175. -rw-r--r-- 1 root root 1.1K Apr 25 00:38 1027056.sst
  176. -rw-r--r-- 1 root root 1.1K Apr 25 00:38 956732.sst
  177. -rw-r--r-- 1 root root 3.0K Apr 25 00:38 948925.sst
  178. -rw-r--r-- 1 root root  989 Apr 25 00:38 933357.sst
  179. -rw-r--r-- 1 root root 1003 Apr 25 00:38 769052.sst
  180. -rw-r--r-- 1 root root  991 Apr 25 00:38 722077.sst
  181. -rw-r--r-- 1 root root 1.6K Apr 25 00:38 467487.sst
  182. -rw-r--r-- 1 root root 1015 Apr 25 00:38 420476.sst
  183. -rw-r--r-- 1 root root 6.2K Apr 25 00:38 059439.sst
  184. -rw-r--r-- 1 root root  971 Apr 25 00:38 029588.sst
  185. -rw-r--r-- 1 root root  955 Apr 25 00:38 847357.sst
  186. -rw-r--r-- 1 root root 1.1K Apr 25 00:38 483185.sst
  187. -rw-r--r-- 1 root root 1.1K Apr 25 00:38 231720.sst
  188. -rw-r--r-- 1 root root 1.2K Apr 25 00:38 222921.sst
  189. -rw-r--r-- 1 root root 1.1K Apr 25 00:38 187850.sst
  190. -rw-r--r-- 1 root root 1.1K Apr 25 00:38 179083.sst
  191. -rw-r--r-- 1 root root 2.2K Apr 25 00:38 941131.sst
  192. -rw-r--r-- 1 root root 1.1K Apr 25 00:38 878664.sst
  193. -rw-r--r-- 1 root root 1003 Apr 25 00:38 635972.sst
  194. -rw-r--r-- 1 root root 1012 Apr 25 00:38 581092.sst
  195. -rw-r--r-- 1 root root  953 Apr 25 00:38 326284.sst
  196. -rw-r--r-- 1 root root    0 Dec  1  2016 LOG
  197. -rw-r--r-- 1 root root    0 Dec  1  2016 LOG.old.1480623856134798
  198. -rw-r--r-- 1 root root    0 Nov  7  2016 LOG.old.1480623856126275
  199. -rw-r--r-- 1 root root    0 Nov  7  2016 LOG.old.1478520192771897
  200. -rw-r--r-- 1 root root    0 Aug 30  2016 LOG.old.1478520192722831
  201. -rw-r--r-- 1 root root    0 Aug 30  2016 LOG.old.1472605102050147
  202. -rw-r--r-- 1 root root    0 Aug 23  2016 LOG.old.1472605102037343
  203. -rw-r--r-- 1 root root    0 Aug 23  2016 LOG.old.1471996707661786
  204. -rw-r--r-- 1 root root    0 Jun 15  2016 LOG.old.1471996707644407
  205. -rw-r--r-- 1 root root    0 Jun 15  2016 LOG.old.1466011983926467
  206. -rw-r--r-- 1 root root   37 Jun 15  2016 IDENTITY
  207. -rw-r--r-- 1 root root    0 Jun 15  2016 LOCK
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement