{"ts": "2026-11-07T13:02:35+00:00", "source": "auditd", "key": "exec", "audit_key": "tool_exec", "syscall": "execve", "exe": "/usr/bin/timeout", "uid": "1001", "pid": "943", "success": "yes", "argv": ["timeout", "600s", "/tmp/tool-cmd.sh"], "path": "/usr/bin/timeout"}
{"ts": "2026-11-07T13:02:35+00:00", "source": "auditd", "key": "exec", "audit_key": "tool_exec", "syscall": "execve", "exe": "/usr/bin/bash", "uid": "1001", "pid": "944", "success": "yes", "argv": ["/bin/bash", "/tmp/tool-cmd.sh"], "path": "/tmp/tool-cmd.sh"}
{"ts": "2026-11-07T13:02:35+00:00", "source": "auditd", "key": "exec", "audit_key": "tool_exec", "syscall": "execve", "exe": "/usr/bin/uname", "uid": "1001", "pid": "945", "success": "yes", "argv": ["uname"], "path": "/usr/bin/uname"}
{"ts": "2026-11-07T13:02:35+00:00", "source": "auditd", "key": "exec", "audit_key": "tool_exec", "syscall": "execve", "exe": "/usr/bin/python3.13", "uid": "1001", "pid": "944", "success": "yes", "argv": ["/home/tool/.local/mcp-scanner-venv/bin/python3", "/home/tool/.local/mcp-scanner-venv/bin/mcp-scanner", "--log-level", "error", "--analyzers", "yara", "--format", "raw", "--server-url", "http://10.73.3.10:8000/mcp"], "path": "/home/tool/.local/mcp-scanner-venv/bin/mcp-scanner"}