/var/asl/data/suspicious
NameSizeModeActions
/-0770rm
cmd: