malware generic event:
  type: dict
  cli:
    users:
      - root
  help: Events from generic socket