{
  "event": "module_load",
  "pid": 4242,
  "ppid": 1,
  "uid": 0,
  "comm": "insmod",
  "path": "/tmp/evil.ko",
  "module_name": "evil"
}