STANDALONE SYSTEM REPORT

Report: 06-19-2026

Show entries

Search:

LogFileName	FromDate	FromTime	ToDate	ToTime
/var/log/audit/audit.log.4	06/10/2026	19:44:24.003	06/10/2026	19:52:53.230
/var/log/audit/audit.log.3	06/10/2026	19:52:53.230	06/13/2026	10:17:39.028
/var/log/audit/audit.log.2	06/13/2026	10:23:39.028	06/17/2026	19:46:10.859
/var/log/audit/audit.log.1	06/17/2026	19:46:10.859	06/17/2026	19:56:44.860
/var/log/audit/audit.log	06/17/2026	19:56:44.860	06/19/2026	16:06:25.431

Showing 1 to 5 of 5 entries

First Previous1Next Last

Show entries

Search:

Audit Rule
-w /etc/passwd -p wa -k passwd_changes
-w /usr/sbin/usermod -p x -k usermod_exec
-w /etc/passwd -p wa -k identity
-w /etc/group -p wa -k identity
-w /etc/shadow -p wa -k identity
-w /usr/sbin/usermod -p x -k usermod
-w /usr/sbin/useradd -p x -k useradd
-w /usr/sbin/userdel -p x -k userdel
-w /etc/audit -p wa -k audit_policy

Showing 1 to 10 of 10 entries

First Previous1Next Last

Show entries

Search:

Event	Count
CRYPTO_KEY_USER	20428
USER_START	15295
USER_END	15281
USER_ACCT	9068
CRED_DISP	8830
CRED_REFR	7772
USER_CMD	7551
USER_LOGOUT	6230
USER_LOGIN	6227
SERVICE_START	2776
SERVICE_STOP	2776
CRED_ACQ	2332
CRYPTO_SESSION	2180
SYSCALL	1562
LOGIN	1514

Showing 1 to 15 of 19 entries

First Previous1 2Next Last

Event	Count
48	USER_LOGIN
24	USER_ERR
3	SYSCALL

Account	Count
ec2-user	6227

Account	Count
Unknown (user not authenticated)	48

Report: 06-19-2026

Show entries

Search:

User	Enabled	Password	UID	Logon Shell	Last Logon Date	Days Since Last Logon
ec2-user	True	-	1000	/bin/bash	6/19/2026	0
root	True	-	0	/bin/bash	Never
bin	True	-	1	/sbin/nologin	Never
daemon	True	-	2	/sbin/nologin	Never
adm	True	-	3	/sbin/nologin	Never
lp	True	-	4	/sbin/nologin	Never
sync	True	-	5	/bin/sync	Never
shutdown	True	-	6	/sbin/shutdown	Never
halt	True	-	7	/sbin/halt	Never
mail	True	-	8	/sbin/nologin	Never
operator	True	-	11	/sbin/nologin	Never
games	True	-	12	/sbin/nologin	Never
ftp	True	-	14	/sbin/nologin	Never
tss	True	-	59	/sbin/nologin	Never
sshd	True	-	74	/sbin/nologin	Never

Showing 1 to 15 of 25 entries

First Previous1 2Next Last

Date	Subject Primary Account	Subject Secondary Account	Target Account	Action	Result
None	None	None	None	None	None

Show entries

Search:

Date	Account	Action	Result
06/10/2026 19:44:24	ec2-user	login	success
06/10/2026 19:44:24	ec2-user	login	success
06/10/2026 19:44:24	ec2-user	login	success
06/10/2026 19:44:24	ec2-user	login	success
06/10/2026 19:44:24	ec2-user	login	success
06/10/2026 19:44:24	ec2-user	login	success
06/10/2026 19:44:25	ec2-user	login	success
06/10/2026 19:44:25	ec2-user	login	success
06/10/2026 19:44:25	ec2-user	login	success
06/10/2026 19:44:25	ec2-user	login	success
06/10/2026 19:44:25	ec2-user	login	success
06/10/2026 19:44:26	ec2-user	login	success
06/10/2026 19:44:26	ec2-user	login	success
06/10/2026 19:44:26	ec2-user	login	success
06/10/2026 19:44:26	ec2-user	login	success

Showing 1 to 15 of 6,227 entries

First Previous1 2 3 4 5…416Next Last

Show entries

Search:

Date	Account	Action	Result
06/10/2026 19:44:24	ec2-user	USER_LOGOUT	success
06/10/2026 19:44:24	ec2-user	USER_LOGOUT	success
06/10/2026 19:44:24	ec2-user	USER_LOGOUT	success
06/10/2026 19:44:24	ec2-user	USER_LOGOUT	success
06/10/2026 19:44:24	ec2-user	USER_LOGOUT	success
06/10/2026 19:44:24	ec2-user	USER_LOGOUT	success
06/10/2026 19:44:25	ec2-user	USER_LOGOUT	success
06/10/2026 19:44:25	ec2-user	USER_LOGOUT	success
06/10/2026 19:44:25	ec2-user	USER_LOGOUT	success
06/10/2026 19:44:25	ec2-user	USER_LOGOUT	success
06/10/2026 19:44:25	ec2-user	USER_LOGOUT	success
06/10/2026 19:44:25	ec2-user	USER_LOGOUT	success
06/10/2026 19:44:26	ec2-user	USER_LOGOUT	success
06/10/2026 19:44:26	ec2-user	USER_LOGOUT	success
06/10/2026 19:44:26	ec2-user	USER_LOGOUT	success

Showing 1 to 15 of 6,230 entries

First Previous1 2 3 4 5…416Next Last

Date	Account	Action	Result
06/17/2026 19:53:12	ec2-user	USER_LOGIN	failed

Report: 06-19-2026

Group Name	Group Id	Group Member
root	0
bin	1
daemon	2
sys	3
adm	4
tty	5
disk	6
lp	7
mem	8
kmem	9
wheel	10
cdrom	11
mail	12
man	15
dialout	18

Date	Subject Primary Account	Subject Secondary Account	Target Group	Action	Result
None	None	None	None	None	None

Date	Subject Primary Account	Subject Secondary Account	Target Account	Target Group	Action	Result
None	None	None	None	None	None	None

Date	Subject Primary Account	Subject Secondary Account	Action	Result
None	None	None	None	None

Show entries

Search:

Date	Subject Primary Account	Subject Secondary Account	Service Name	Action	Result
06/10/2026 19:48:50	unset	root	nm-cloud-setup	SERVICE_START	success
06/10/2026 19:49:54	unset	root	user-runtime-dir@1000	SERVICE_START	success
06/10/2026 19:49:55	unset	root	user@1000	SERVICE_START	success
06/10/2026 19:50:20	unset	root	user-runtime-dir@1000	SERVICE_START	success
06/10/2026 19:50:20	unset	root	user@1000	SERVICE_START	success
06/10/2026 19:50:47	unset	root	user-runtime-dir@1000	SERVICE_START	success
06/10/2026 19:50:47	unset	root	user@1000	SERVICE_START	success
06/10/2026 19:51:35	unset	root	user-runtime-dir@1000	SERVICE_START	success
06/10/2026 19:51:36	unset	root	user@1000	SERVICE_START	success
06/10/2026 19:51:42	unset	root	timedatex	SERVICE_START	success
06/10/2026 19:53:51	unset	root	nm-cloud-setup	SERVICE_START	success
06/10/2026 19:58:50	unset	root	nm-cloud-setup	SERVICE_START	success
06/10/2026 20:00:38	unset	root	user-runtime-dir@1000	SERVICE_START	success
06/10/2026 20:00:39	unset	root	user@1000	SERVICE_START	success
06/10/2026 20:04:19	unset	root	nm-cloud-setup	SERVICE_START	success

Showing 1 to 15 of 2,776 entries

First Previous1 2 3 4 5…186Next Last

Show entries

Search:

Date	Subject Primary Account	Subject Secondary Account	Service Name	Action	Result
06/10/2026 19:48:50	unset	root	nm-cloud-setup	SERVICE_STOP	success
06/10/2026 19:49:30	unset	root	user@1000	SERVICE_STOP	success
06/10/2026 19:49:30	unset	root	user-runtime-dir@1000	SERVICE_STOP	success
06/10/2026 19:50:06	unset	root	user@1000	SERVICE_STOP	success
06/10/2026 19:50:06	unset	root	user-runtime-dir@1000	SERVICE_STOP	success
06/10/2026 19:50:33	unset	root	user@1000	SERVICE_STOP	success
06/10/2026 19:50:33	unset	root	user-runtime-dir@1000	SERVICE_STOP	success
06/10/2026 19:51:14	unset	root	user@1000	SERVICE_STOP	success
06/10/2026 19:51:14	unset	root	user-runtime-dir@1000	SERVICE_STOP	success
06/10/2026 19:52:12	unset	root	timedatex	SERVICE_STOP	success
06/10/2026 19:53:51	unset	root	nm-cloud-setup	SERVICE_STOP	success
06/10/2026 19:58:50	unset	root	nm-cloud-setup	SERVICE_STOP	success
06/10/2026 19:59:06	unset	root	user@1000	SERVICE_STOP	success
06/10/2026 19:59:06	unset	root	user-runtime-dir@1000	SERVICE_STOP	success
06/10/2026 20:00:52	unset	root	user@1000	SERVICE_STOP	success

Showing 1 to 15 of 2,776 entries

First Previous1 2 3 4 5…186Next Last

Show entries

Search:

Date	Subject Account	Target Account	Result
06/18/2026 14:22:52	ec2-user	root	success
06/19/2026 13:15:39	ec2-user	root	success
06/19/2026 14:18:04	ec2-user	root	success

Showing 1 to 3 of 3 entries

First Previous1Next Last

Show entries

Search:

Date	Subject Primary Account	Subject Secondary Account	Command	Result
06/10/2026 19:44:24	ec2-user	ec2-user	sh -c printf "command_start_%s" "ISM_7USW"; 'echo' $HOME 2>/dev/null; printf "command_done_%s" "9XnCkcYW" exe=/usr/bin/sudo	success
06/10/2026 19:44:24	ec2-user	ec2-user	sh -c printf "command_start_%s" "2kuaRUh2"; cd ~ 2>/dev/null; timeout -s9 240s find '/root/' '/opt/' '/usr/' '/usr/local/' '/usr/share/' '/var/' '/var/lib/' '/apps/' '/home' -maxdepth 10 -xautofs $ ! \( -fstype nfs -prune -o -fstype nfs4 -prune -o -fstype cifs -prune -o -fstype smbfs -prune -o -fstype afs -prune -o -fstype sysfs -prune -o -fstype proc -prune -o -fstype panfs -prune $ ! $ -path '/bin' -prune -o -path '/boot' -prune -o -path '/dev' -prune -o -path '/etc' -prune -o -path '/lib' -prune -o -path '/media' -prune -o -path '/mnt' -prune -o -path '/proc' -prune -o -path '/run' -prune -o -path '/sbin' -prune -o -path '/srv' -prune -o -path '/sys' -prune -o -path '/tmp' -prune $ -a $ -path '/NVIDIA-Nsight-Graphics' $ \) 2>/dev/null; RET=$?; echo; echo "$RET"; printf "command_done_%s" "lSM7Gt3y" exe=/usr/bin/sudo	success
06/10/2026 19:44:24	ec2-user	ec2-user	sh -c printf "command_start_%s" "G_cIxYkW"; [ -f "/usr/local/lib/python3.9/site-packages/setuptools/_vendor/backports.tarfile-1.2.0.dist-info/METADATA" ] \|\| [ -d "/usr/local/lib/python3.9/site-packages/setuptools/_vendor/backports.tarfile-1.2.0.dist-info/METADATA" ] && echo "found"; printf "command_done_%s" "w4XRdPjv" exe=/usr/bin/sudo	success
06/10/2026 19:44:24	ec2-user	ec2-user	sh -c printf "command_start_%s" "ISgI0oEm"; readlink -e '/usr/bin/openssl' 2>/dev/null; printf "command_done_%s" "DMhJ1OEW" exe=/usr/bin/sudo	success
06/10/2026 19:44:24	ec2-user	ec2-user	sh -c printf "command_start_%s" "fUvkyhKi"; cat '/etc/systemd/system/ollama.service' 2>/dev/null; printf "command_done_%s" "NyCdR4dp" exe=/usr/bin/sudo	success
06/10/2026 19:44:24	ec2-user	ec2-user	sh -c printf "command_start_%s" "SENKEAVJ"; 'echo' $PATH 2>/dev/null; printf "command_done_%s" "4TloF9G1" exe=/usr/bin/sudo	success
06/10/2026 19:44:24	ec2-user	ec2-user	sh -c printf "command_start_%s" "oHakfHN9"; grep -E '^Version:\s+([0-9.]+)' '/usr/local/lib/python3.9/site-packages/setuptools/_vendor/backports.tarfile-1.2.0.dist-info/METADATA' 2>/dev/null; printf "command_done_%s" "JaKA2_N7" exe=/usr/bin/sudo	success
06/10/2026 19:44:25	ec2-user	ec2-user	sh -c printf "command_start_%s" "EPad7OQy"; file '/usr/bin/openssl'; printf "command_done_%s" "0350gYWT" exe=/usr/bin/sudo	success
06/10/2026 19:44:25	ec2-user	ec2-user	sh -c printf "command_start_%s" "S4PoAq3f"; cat '/etc/environment' 2>/dev/null; printf "command_done_%s" "QScytW4e" exe=/usr/bin/sudo	success
06/10/2026 19:44:25	ec2-user	ec2-user	sh -c printf "command_start_%s" "CPdHsMyI"; cd ~ 2>/dev/null; timeout -s9 240s find '/sbin' '/bin' '/usr/sbin' '/usr/bin' '/usr/local/sbin' '/usr/local/bin' -xautofs -follow $ ! \( -fstype nfs -prune -o -fstype nfs4 -prune -o -fstype cifs -prune -o -fstype smbfs -prune -o -fstype afs -prune -o -fstype sysfs -prune -o -fstype proc -prune -o -fstype panfs -prune $ -a $ -path '*/java' $ \) 2>/dev/null; RET=$?; echo; echo "$RET"; printf "command_done_%s" "STZRz7Jx" exe=/usr/bin/sudo	success
06/10/2026 19:44:25	ec2-user	ec2-user	sh -c printf "command_start_%s" "1NlPjtEi"; [ -f "/usr/local/lib/python3.9/site-packages/setuptools/_vendor/backports.tarfile-1.2.0.dist-info/METADATA" ] \|\| [ -d "/usr/local/lib/python3.9/site-packages/setuptools/_vendor/backports.tarfile-1.2.0.dist-info/METADATA" ] && echo "found"; printf "command_done_%s" "xf4KP2sg" exe=/usr/bin/sudo	success
06/10/2026 19:44:26	ec2-user	ec2-user	sh -c printf "command_start_%s" "PiJWVk7D"; readlink -e '/usr/lib64/libcrypto.so.1.1' 2>/dev/null; printf "command_done_%s" "UxvYrpgo" exe=/usr/bin/sudo	success
06/10/2026 19:44:26	ec2-user	ec2-user	sh -c printf "command_start_%s" "352koZL2"; cat '/etc/profile' 2>/dev/null; printf "command_done_%s" "8KthcWcH" exe=/usr/bin/sudo	success
06/10/2026 19:44:26	ec2-user	ec2-user	sh -c printf "command_start_%s" "fggyadPz"; cd ~ 2>/dev/null; timeout -s9 240s find '/opt/' '/usr/' -xautofs -follow $ ! \( -fstype nfs -prune -o -fstype nfs4 -prune -o -fstype cifs -prune -o -fstype smbfs -prune -o -fstype afs -prune -o -fstype sysfs -prune -o -fstype proc -prune -o -fstype panfs -prune $ -a $ -path '*/java' $ \) 2>/dev/null; RET=$?; echo; echo "$RET"; printf "command_done_%s" "Ht21FO46" exe=/usr/bin/sudo	success
06/10/2026 19:44:26	ec2-user	ec2-user	sh -c printf "command_start_%s" "US8UqpUM"; grep -E '^Name:\s+(.*)' '/usr/local/lib/python3.9/site-packages/setuptools/_vendor/backports.tarfile-1.2.0.dist-info/METADATA' 2>/dev/null; printf "command_done_%s" "3M_jJWmU" exe=/usr/bin/sudo	success

Showing 1 to 15 of 7,565 entries

First Previous1 2 3 4 5…505Next Last

Report: 06-19-2026

Show entries

Search:

Key	Value
ReportLocation	/tmp/
ReportName	$(date +%Y%m%d)-$(hostname)-POWERSTRUXLA-REPORT
DaysToAudit	100 (Start Date:03/11/2026)

Showing 1 to 3 of 3 entries

First Previous1Next Last