{ "_event_score": 10, "arguments": { "pid": 33183, "port": 1379 }, "header": { "event_id": 43049, "event_modifier": 0, "event_name": "AUE_PIDFORTASK", "time_milliseconds_offset": 295, "time_seconds_epoch": 1570154823, "version": 11 }, "host_info": { "host_name": "Dan_macbook_pro", "host_uuid": "3F6E4B3A-9285-4E7E-9A0C-C3B62DC379DF", "osversion": "Version 10.14.6 (Build 18G95)", "primary_mac_address": "38:f9:e8:15:5a:82", "serial_number": "C03XY889JHG3" }, "return": { "description": "success", "error": 0, "return_value": 0 }, "subject": { "audit_id": 4294967295, "audit_user_name": "-1", "effective_group_id": 0, "effective_group_name": "wheel", "effective_user_id": 0, "effective_user_name": "root", "group_id": 0, "group_name": "wheel", "process_hash": "3E38EA613B3FCC0B9136BBAC9949A7F9EE6C5B8B", "process_id": 96805, "process_name": "/usr/libexec/sandboxd", "session_id": 100000, "terminal_id": { "addr": [ 0 ], "ip_address": "0.0.0.0", "port": 0, "type": 0 }, "user_id": 0, "user_name": "root" } }