BETH Dataset

timestamp Timestamp	processid ProcessId	parentprocessid ParentProcessId	userid UserId	processname ProcessName	hostname HostName	eventid EventId	eventname EventName	argsnum ArgsNum	returnvalue ReturnValue	args Args
126.233491	1			systemd	ip-10-100-1-105	1005	security_file_open	4		[{'name': 'pathname', 'type': 'const char*', 'value': '/proc/384/cgroup'}, {'name': 'flags', 'type': 'unsigned long', 'value': 'O_RDONLY\|O_LARGEFILE'}, {'name': 'dev', 'type': 'dev_t', 'value': 5}, {'name': 'inode', 'type': 'unsigned long', 'value': 39481}]
126.233165	384	1	101	systemd-resolve	ip-10-100-1-105	41	socket	3	15	[{'name': 'domain', 'type': 'int', 'value': 'AF_UNIX'}, {'name': 'type', 'type': 'int', 'value': 'SOCK_DGRAM\|SOCK_CLOEXEC'}, {'name': 'protocol', 'type': 'int', 'value': 0}]
126.233559	1			systemd	ip-10-100-1-105	5	fstat	2		[{'name': 'fd', 'type': 'int', 'value': 18}, {'name': 'statbuf', 'type': 'struct stat*', 'value': '0x7FFF1D8D98F0'}]
126.233681	1			systemd	ip-10-100-1-105	3	close	1		[{'name': 'fd', 'type': 'int', 'value': 18}]
126.233796	384	1	101	systemd-resolve	ip-10-100-1-105	3	close	1		[{'name': 'fd', 'type': 'int', 'value': 15}]
126.23353	1			systemd	ip-10-100-1-105	257	openat	4	18	[{'name': 'dirfd', 'type': 'int', 'value': -100}, {'name': 'pathname', 'type': 'const char', 'value': '/proc/384/cgroup'}, {'name': 'flags', 'type': 'unsigned long', 'value': 'O_RDONLY\|O_CLOEXEC'}, {'name': 'mode', 'type': 'int', 'value': 1223040804}]
126.23389	384	1	101	systemd-resolve	ip-10-100-1-105	1005	security_file_open	4		[{'name': 'pathname', 'type': 'const char*', 'value': '/run/systemd/netif/links/5'}, {'name': 'flags', 'type': 'unsigned long', 'value': 'O_RDONLY\|O_LARGEFILE'}, {'name': 'dev', 'type': 'dev_t', 'value': 25}, {'name': 'inode', 'type': 'unsigned long', 'value': 527}]
126.233959	384	1	101	systemd-resolve	ip-10-100-1-105	257	openat	4	15	[{'name': 'dirfd', 'type': 'int', 'value': -100}, {'name': 'pathname', 'type': 'const char', 'value': '/run/systemd/netif/links/5'}, {'name': 'flags', 'type': 'unsigned long', 'value': 'O_RDONLY\|O_CLOEXEC'}, {'name': 'mode', 'type': 'int', 'value': 964865707}]
126.233996	384	1	101	systemd-resolve	ip-10-100-1-105	5	fstat	2		[{'name': 'fd', 'type': 'int', 'value': 15}, {'name': 'statbuf', 'type': 'struct stat*', 'value': '0x7FFFB77D84D0'}]
126.234156	384	1	101	systemd-resolve	ip-10-100-1-105	1005	security_file_open	4		[{'name': 'pathname', 'type': 'const char*', 'value': '/run/systemd/netif/links/5'}, {'name': 'flags', 'type': 'unsigned long', 'value': 'O_RDONLY\|O_LARGEFILE'}, {'name': 'dev', 'type': 'dev_t', 'value': 25}, {'name': 'inode', 'type': 'unsigned long', 'value': 527}]


CREATE TABLE labelled_2021may_ip_10_100_1_105 (
  "timestamp" DOUBLE,
  "processid" BIGINT,
  "parentprocessid" BIGINT,
  "userid" BIGINT,
  "processname" VARCHAR,
  "hostname" VARCHAR,
  "eventid" BIGINT,
  "eventname" VARCHAR,
  "argsnum" BIGINT,
  "returnvalue" BIGINT,
  "args" VARCHAR,
  "sus" BIGINT,
  "evil" BIGINT
);