Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- danielpops@host:~ [00:34:09] ✓
- $ sudo ls -ult /var/osquery/osquery.db/ | wc -l
- 61566
- danielpops@host:~ [00:38:56] ✓
- $ sudo ls -ult /var/osquery/osquery.db/ | head -100
- total 268M
- -rw-r--r-- 1 root root 1012 Apr 26 00:38 679003.sst
- -rw-r--r-- 1 root root 1012 Apr 26 00:38 675074.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:38 455765.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:38 353732.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:38 334159.sst
- -rw-r--r-- 1 root root 938 Apr 26 00:37 113605.sst
- -rw-r--r-- 1 root root 976 Apr 26 00:37 087493.sst
- -rw-r--r-- 1 root root 954 Apr 26 00:37 050921.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:37 859061.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:37 812067.sst
- -rw-r--r-- 1 root root 1016 Apr 26 00:37 729877.sst
- -rw-r--r-- 1 root root 1.7K Apr 26 00:37 718162.sst
- -rw-r--r-- 1 root root 991 Apr 26 00:37 561517.sst
- -rw-r--r-- 1 root root 1.2K Apr 26 00:37 534082.sst
- -rw-r--r-- 1 root root 954 Apr 26 00:37 412668.sst
- -rw-r--r-- 1 root root 954 Apr 26 00:37 126690.sst
- -rw-r--r-- 1 root root 1004 Apr 26 00:37 1015311.sst
- -rw-r--r-- 1 root root 991 Apr 26 00:37 749445.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:37 741632.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:37 436179.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:37 393039.sst
- -rw-r--r-- 1 root root 2.6K Apr 26 00:37 318373.sst
- -rw-r--r-- 1 root root 991 Apr 26 00:37 310502.sst
- -rw-r--r-- 1 root root 1.2K Apr 26 00:37 302600.sst
- -rw-r--r-- 1 root root 1.3K Apr 26 00:37 294761.sst
- -rw-r--r-- 1 root root 7.4K Apr 26 00:37 148466.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:37 135382.sst
- -rw-r--r-- 1 root root 7.2K Apr 26 00:37 074361.sst
- -rw-r--r-- 1 root root 1010 Apr 26 00:37 067967.sst
- -rw-r--r-- 1 root root 954 Apr 26 00:37 780804.sst
- -rw-r--r-- 1 root root 978 Apr 26 00:37 765112.sst
- -rw-r--r-- 1 root root 954 Apr 26 00:37 577169.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:37 538015.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:37 255512.sst
- -rw-r--r-- 1 root root 1.2K Apr 26 00:37 239754.sst
- -rw-r--r-- 1 root root 929 Apr 26 00:37 157219.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:37 038124.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:37 1003582.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:37 964578.sst
- -rw-r--r-- 1 root root 967 Apr 26 00:36 1030977.sst
- -rw-r--r-- 1 root root 1013 Apr 26 00:36 823841.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:36 761188.sst
- -rw-r--r-- 1 root root 976 Apr 26 00:36 518444.sst
- -rw-r--r-- 1 root root 991 Apr 26 00:36 498886.sst
- -rw-r--r-- 1 root root 1.8K Apr 26 00:36 487106.sst
- -rw-r--r-- 1 root root 1.7K Apr 26 00:36 459676.sst
- -rw-r--r-- 1 root root 8.1K Apr 26 00:36 214101.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:36 205348.sst
- -rw-r--r-- 1 root root 954 Apr 26 00:36 196631.sst
- -rw-r--r-- 1 root root 975 Apr 26 00:36 174712.sst
- -rw-r--r-- 1 root root 2.6K Apr 26 00:36 995791.sst
- -rw-r--r-- 1 root root 991 Apr 26 00:36 440074.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:36 271159.sst
- -rw-r--r-- 1 root root 7.0K Apr 26 00:36 263326.sst
- -rw-r--r-- 1 root root 1011 Apr 26 00:36 247644.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:36 165968.sst
- -rw-r--r-- 1 root root 2.5K Apr 26 00:36 984113.sst
- -rw-r--r-- 1 root root 2.7K Apr 26 00:36 972367.sst
- -rw-r--r-- 1 root root 1.2K Apr 26 00:36 952838.sst
- -rw-r--r-- 1 root root 2.2K Apr 26 00:36 855162.sst
- -rw-r--r-- 1 root root 1011 Apr 26 00:36 671142.sst
- -rw-r--r-- 1 root root 1.2K Apr 26 00:36 122342.sst
- -rw-r--r-- 1 root root 994 Apr 26 00:35 843455.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:35 831667.sst
- -rw-r--r-- 1 root root 1.8K Apr 26 00:35 800320.sst
- -rw-r--r-- 1 root root 966 Apr 26 00:35 776894.sst
- -rw-r--r-- 1 root root 1012 Apr 26 00:35 706431.sst
- -rw-r--r-- 1 root root 991 Apr 26 00:35 702440.sst
- -rw-r--r-- 1 root root 1.2K Apr 26 00:35 424407.sst
- -rw-r--r-- 1 root root 954 Apr 26 00:35 278999.sst
- -rw-r--r-- 1 root root 7.6K Apr 26 00:35 035989.sst
- -rw-r--r-- 1 root root 2.6K Apr 26 00:35 1007518.sst
- -rw-r--r-- 1 root root 2.5K Apr 26 00:35 960661.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:35 937225.sst
- -rw-r--r-- 1 root root 955 Apr 26 00:35 870804.sst
- -rw-r--r-- 1 root root 1013 Apr 26 00:35 565420.sst
- -rw-r--r-- 1 root root 1.8K Apr 26 00:35 444020.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:35 286845.sst
- -rw-r--r-- 1 root root 5.6K Apr 26 00:35 109259.sst
- -rw-r--r-- 1 root root 1.2K Apr 26 00:35 096208.sst
- -rw-r--r-- 1 root root 1000 Apr 26 00:35 545837.sst
- -rw-r--r-- 1 root root 1003 Apr 26 00:35 541909.sst
- -rw-r--r-- 1 root root 991 Apr 26 00:35 522376.sst
- -rw-r--r-- 1 root root 1.3K Apr 26 00:35 502780.sst
- -rw-r--r-- 1 root root 1009 Apr 26 00:35 235863.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:35 227291.sst
- -rw-r--r-- 1 root root 1.3K Apr 26 00:35 1034896.sst
- -rw-r--r-- 1 root root 991 Apr 26 00:35 745553.sst
- -rw-r--r-- 1 root root 966 Apr 26 00:35 667268.sst
- -rw-r--r-- 1 root root 2.4K Apr 26 00:35 345860.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:35 338018.sst
- -rw-r--r-- 1 root root 990 Apr 26 00:35 330171.sst
- -rw-r--r-- 1 root root 947 Apr 26 00:35 065827.sst
- -rw-r--r-- 1 root root 1.2K Apr 26 00:35 055177.sst
- -rw-r--r-- 1 root root 1.1K Apr 26 00:35 1023142.sst
- -rw-r--r-- 1 root root 1.2K Apr 26 00:35 808126.sst
- -rw-r--r-- 1 root root 991 Apr 26 00:35 796409.sst
- -rw-r--r-- 1 root root 1.8K Apr 26 00:35 569341.sst
- -rw-r--r-- 1 root root 1.7K Apr 26 00:35 506668.sst
- danielpops@host:~ [00:38:02] ✓
- $ sudo ls -ult /var/osquery/osquery.db/ | tail -100
- -rw-r--r-- 1 root root 2.0K Apr 25 00:39 549787.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:39 545850.sst
- -rw-r--r-- 1 root root 978 Apr 25 00:39 526282.sst
- -rw-r--r-- 1 root root 953 Apr 25 00:39 306551.sst
- -rw-r--r-- 1 root root 953 Apr 25 00:39 298670.sst
- -rw-r--r-- 1 root root 3.6K Apr 25 00:39 290806.sst
- -rw-r--r-- 1 root root 953 Apr 25 00:39 259400.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:39 251587.sst
- -rw-r--r-- 1 root root 953 Apr 25 00:39 243701.sst
- -rw-r--r-- 1 root root 950 Apr 25 00:39 044521.sst
- -rw-r--r-- 1 root root 973 Apr 25 00:39 033853.sst
- -rw-r--r-- 1 root root 1.2K Apr 25 00:39 031726.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:39 815994.sst
- -rw-r--r-- 1 root root 954 Apr 25 00:39 753371.sst
- -rw-r--r-- 1 root root 954 Apr 25 00:39 737707.sst
- -rw-r--r-- 1 root root 1.8K Apr 25 00:39 510607.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:39 451867.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:39 917782.sst
- -rw-r--r-- 1 root root 2.4K Apr 25 00:39 913905.sst
- -rw-r--r-- 1 root root 1.2K Apr 25 00:39 902187.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:39 862986.sst
- -rw-r--r-- 1 root root 1.2K Apr 25 00:39 839507.sst
- -rw-r--r-- 1 root root 1.8K Apr 25 00:39 827783.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:39 788617.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:39 659481.sst
- -rw-r--r-- 1 root root 2.6K Apr 25 00:39 655540.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:39 651620.sst
- -rw-r--r-- 1 root root 2.6K Apr 25 00:39 620282.sst
- -rw-r--r-- 1 root root 987 Apr 25 00:39 596759.sst
- -rw-r--r-- 1 root root 954 Apr 25 00:39 592835.sst
- -rw-r--r-- 1 root root 954 Apr 25 00:39 553712.sst
- -rw-r--r-- 1 root root 966 Apr 25 00:39 479251.sst
- -rw-r--r-- 1 root root 954 Apr 25 00:39 377342.sst
- -rw-r--r-- 1 root root 1.0K Apr 25 00:39 357670.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:39 117970.sst
- -rw-r--r-- 1 root root 1.2K Apr 25 00:39 091836.sst
- -rw-r--r-- 1 root root 966 Apr 25 00:39 053052.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:39 976278.sst
- -rw-r--r-- 1 root root 955 Apr 25 00:39 968481.sst
- -rw-r--r-- 1 root root 992 Apr 25 00:39 898268.sst
- -rw-r--r-- 1 root root 991 Apr 25 00:39 690717.sst
- -rw-r--r-- 1 root root 2.4K Apr 25 00:39 585016.sst
- -rw-r--r-- 1 root root 1016 Apr 25 00:39 369490.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:39 282908.sst
- -rw-r--r-- 1 root root 7.9K Apr 25 00:39 267245.sst
- -rw-r--r-- 1 root root 988 Apr 25 00:39 131054.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:39 104926.sst
- -rw-r--r-- 1 root root 1.2K Apr 25 00:39 042388.sst
- -rw-r--r-- 1 root root 1014 Apr 25 00:39 1011404.sst
- -rw-r--r-- 1 root root 955 Apr 25 00:39 999697.sst
- -rw-r--r-- 1 root root 1.6K Apr 25 00:39 910004.sst
- -rw-r--r-- 1 root root 1.7K Apr 25 00:39 686825.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:39 647705.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:39 643809.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:39 632052.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:39 628111.sst
- -rw-r--r-- 1 root root 1.2K Apr 25 00:39 624199.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:39 612424.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:39 608499.sst
- -rw-r--r-- 1 root root 2.5K Apr 25 00:39 604584.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:38 161634.sst
- -rw-r--r-- 1 root root 929 Apr 25 00:38 139757.sst
- -rw-r--r-- 1 root root 991 Apr 25 00:38 070104.sst
- -rw-r--r-- 1 root root 1.9K Apr 25 00:38 784713.sst
- -rw-r--r-- 1 root root 991 Apr 25 00:38 494958.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:38 389129.sst
- -rw-r--r-- 1 root root 975 Apr 25 00:38 170348.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:38 1027056.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:38 956732.sst
- -rw-r--r-- 1 root root 3.0K Apr 25 00:38 948925.sst
- -rw-r--r-- 1 root root 989 Apr 25 00:38 933357.sst
- -rw-r--r-- 1 root root 1003 Apr 25 00:38 769052.sst
- -rw-r--r-- 1 root root 991 Apr 25 00:38 722077.sst
- -rw-r--r-- 1 root root 1.6K Apr 25 00:38 467487.sst
- -rw-r--r-- 1 root root 1015 Apr 25 00:38 420476.sst
- -rw-r--r-- 1 root root 6.2K Apr 25 00:38 059439.sst
- -rw-r--r-- 1 root root 971 Apr 25 00:38 029588.sst
- -rw-r--r-- 1 root root 955 Apr 25 00:38 847357.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:38 483185.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:38 231720.sst
- -rw-r--r-- 1 root root 1.2K Apr 25 00:38 222921.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:38 187850.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:38 179083.sst
- -rw-r--r-- 1 root root 2.2K Apr 25 00:38 941131.sst
- -rw-r--r-- 1 root root 1.1K Apr 25 00:38 878664.sst
- -rw-r--r-- 1 root root 1003 Apr 25 00:38 635972.sst
- -rw-r--r-- 1 root root 1012 Apr 25 00:38 581092.sst
- -rw-r--r-- 1 root root 953 Apr 25 00:38 326284.sst
- -rw-r--r-- 1 root root 0 Dec 1 2016 LOG
- -rw-r--r-- 1 root root 0 Dec 1 2016 LOG.old.1480623856134798
- -rw-r--r-- 1 root root 0 Nov 7 2016 LOG.old.1480623856126275
- -rw-r--r-- 1 root root 0 Nov 7 2016 LOG.old.1478520192771897
- -rw-r--r-- 1 root root 0 Aug 30 2016 LOG.old.1478520192722831
- -rw-r--r-- 1 root root 0 Aug 30 2016 LOG.old.1472605102050147
- -rw-r--r-- 1 root root 0 Aug 23 2016 LOG.old.1472605102037343
- -rw-r--r-- 1 root root 0 Aug 23 2016 LOG.old.1471996707661786
- -rw-r--r-- 1 root root 0 Jun 15 2016 LOG.old.1471996707644407
- -rw-r--r-- 1 root root 0 Jun 15 2016 LOG.old.1466011983926467
- -rw-r--r-- 1 root root 37 Jun 15 2016 IDENTITY
- -rw-r--r-- 1 root root 0 Jun 15 2016 LOCK
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement