{
"event": "PreToolUse",
"tool_name": "Bash",
"tool_input": {
"command": "grep -r \"148.251.182.181\\|prod.karlkratz.com\\|prod\\.karl\" \/var\/www\/scripts\/ \/etc\/cron* \/root\/.ssh\/ 2>\/dev\/null | head -50",
"description": "Search for prod server references in scripts and crons"
}
}
{
"tool_response": {
"stdout": "\/root\/.ssh\/authorized_keys:ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ2eZEB06OTQHGbN1JAJ3FNttM6xTtDsbERVkQ8wCjBr root@prod.karlkratz.com",
"stderr": "",
"interrupted": false,
"isImage": false,
"noOutputExpected": false
}
}