grep WasHere /var/log/fleet/osquery.results.log   | xxd
00000000: 7b22 736e 6170 7368 6f74 223a 5b5d 2c22  {"snapshot":[],"
00000010: 6163 7469 6f6e 223a 2273 6e61 7073 686f  action":"snapsho
00000020: 7422 2c22 6e61 6d65 223a 2270 6163 6b2f  t","name":"pack/
00000030: 5065 7273 6973 7465 6e63 6520 4d65 6368  Persistence Mech
00000040: 616e 6973 6d73 2f55 6e6c 696e 6b65 6420  anisms/Unlinked 
00000050: 5072 6f63 6573 7365 7322 2c22 686f 7374  Processes","host
00000060: 4964 656e 7469 6669 6572 223a 2248 65f1  Identifier":"He.
00000070: 7279 5761 7348 6572 6522 2c22 6361 6c65  ryWasHere","cale
00000080: 6e64 6172 5469 6d65 223a 2254 6875 204a  ndarTime":"Thu J
00000090: 756e 2020 3720 3033 3a34 373a 3437 2032  un  7 03:47:47 2
000000a0: 3031 3820 5554 4322 2c22 756e 6978 5469  018 UTC","unixTi
000000b0: 6d65 223a 3135 3238 3334 3332 3637 2c22  me":1528343267,"
000000c0: 6570 6f63 6822 3a30 2c22 636f 756e 7465  epoch":0,"counte
000000d0: 7222 3a30 2c22 6465 636f 7261 7469 6f6e  r":0,"decoration
000000e0: 7322 3a7b 2263 6f6d 7061 6e79 223a 2277  s":{"company":"w
000000f0: 6565 626c 7922 2c22 6861 7264 7761 7265  eebly","hardware
00000100: 5f6d 6f64 656c 223a 2250 6172 616c 6c65  _model":"Paralle
00000110: 6c73 2056 6972 7475 616c 2050 6c61 7466  ls Virtual Platf
00000120: 6f72 6d22 2c22 6861 7264 7761 7265 5f73  orm","hardware_s
00000130: 6572 6961 6c22 3a22 5061 7261 6c6c 656c  erial":"Parallel
00000140: 732d 4536 2033 4620 4443 2030 4220 3335  s-E6 3F DC 0B 35
00000150: 2034 4620 3434 2037 3320 4234 2033 4220   4F 44 73 B4 3B 
00000160: 3039 2034 4120 4136 2036 4420 3332 2041  09 4A A6 6D 32 A
00000170: 3322 2c22 686f 7374 5f75 7569 6422 3a22  3","host_uuid":"
00000180: 3042 4443 3346 4536 2d34 4633 352d 3733  0BDC3FE6-4F35-73
00000190: 3434 2d42 3433 422d 3039 3441 4136 3644  44-B43B-094AA66D
000001a0: 3332 4133 222c 2268 6f73 746e 616d 6522  32A3","hostname"
000001b0: 3a22 4865 f172 7957 6173 4865 7265 227d  :"He.ryWasHere"}
000001c0: 7d0a                                     }.