osquery-defense-kit/docker/unexpected-privileged-containers.sql
2022-09-13 20:46:04 -04:00

4 lines
87 B
SQL

SELECT *
FROM docker_containers
WHERE privileged=1
AND image NOT LIKE "kindest/node:%";