osQuery Management Server (Prime).Osquery Admin Application Processes (SQLite SQL Statements)
SELECT
p.pid,
p.name,
u.username,
p.path
FROM processes p
JOIN users u ON p.uid = u.uid
WHERE
(p.name LIKE 'nginx%' OR p.name LIKE 'apache%' OR p.name LIKE 'postgres%' OR p.name LIKE 'mysqld%')
AND (u.username LIKE 'root%' OR u.username LIKE 'admin%' OR u.username LIKE '%sudo%');