osQuery Management Server (Prime).Monitor SSHD Processes (SQLite SQL Statements)

SELECT pid, name, path, cmdline FROM processes WHERE cmdline LIKE '%sshd%';