Skip to main content


This view provides raw historic data about command line invocations.

Lacework regularly monitors for command line invocations in your environment across machines and returns a row in the CMDLINE_V view when Lacework detects a command line invocation.

Each row contains command line information as listed in the columns.

Column NameData TypeDescription
CREATED_TIMETimestampThe time and date when the command line was detected by Lacework.
CMDLINE_HASHTextThe hash generated by hashing the command line name.
CMDLINETextThe name of the command line executable.