CmdID

CmdID / Commands

uptime

Tell the current time, how long the system has been running, the number of users, and the system load averages for the past 1, 5 and 15 minutes. toybox

On Linux, macOS 1 Sigma rule name it

Opens CmdID with your command. It is read in your browser and sent nowhere.

Linux

from the toybox, 0BSD
uptime [-ps]
-pPretty (human readable) uptime
-sSince when has the system been up?

Several platforms

from tldr-pages, CC BY 4.0

Tell how long the system has been running and other information.

Print current time, uptime, number of logged-in users, and other information

uptimeIdentify

Trips 1 Sigma rule: informationalSystem Information Discovery by Ömer Günal, oscd.community

Show only the amount of time the system has been booted for

uptime --prettyIdentify

Trips 1 Sigma rule: informationalSystem Information Discovery by Ömer Günal, oscd.community

Print the date and time the system booted up at

uptime --sinceIdentify

Trips 1 Sigma rule: informationalSystem Information Discovery by Ömer Günal, oscd.community

Display the time data in seconds

uptime --rawIdentify

Trips 1 Sigma rule: informationalSystem Information Discovery by Ömer Günal, oscd.community

Display version

uptime --versionIdentify

Trips 1 Sigma rule: informationalSystem Information Discovery by Ömer Günal, oscd.community

macOS

from tldr-pages, CC BY 4.0

Tell how long the system has been running and other information.

Print current time, uptime, number of logged-in users, and other information

uptimeIdentify

Trips 1 Sigma rule: informationalSystem Information Discovery by Ömer Günal, oscd.community

What detects it

Sigma process creation rules that name uptime
informationalSystem Information DiscoveryÖmer Günal, oscd.community