{
  "event": "chmod",
  "pid": 4243,
  "ppid": 1,
  "uid": 0,
  "comm": "chmod",
  "parent_comm": "bash",
  "path": "/etc/cron.d/backup",
  "mode": "0o777"
}