{ "event": "syscall", "pid": 4256, "ppid": 4100, "uid": 1000, "comm": "secretstore", "syscall": "mlock", "args": [140000000, 4096, 0] }