{
  "event": "syscall",
  "pid": 4253,
  "ppid": 4100,
  "uid": 1000,
  "comm": "debugger",
  "syscall": "ptrace",
  "args": [16, 5000, 0]
}