{"evt.time":"2026-08-10T09:25:12.441Z","container":true,"proc.name":"sh",
"proc.cmdline":"sh -c cat /var/run/secrets/kubernetes.io/serviceaccount/token",
"user.name":"root","k8s.ns.name":"payments","k8s.pod.name":"api-7f9d","container.name":"api"}