osquery-defense-kit/detection/privesc/unexpected-privileged-conta...

8 lines
98 B
MySQL
Raw Normal View History

SELECT
*
FROM
docker_containers
WHERE
privileged = 1
AND image NOT LIKE 'kindest/node:%';