osquery-defense-kit/docker/unexpected-privileged-containers.sql
2022-09-24 11:12:23 -04:00

8 lines
98 B
SQL

SELECT
*
FROM
docker_containers
WHERE
privileged = 1
AND image NOT LIKE "kindest/node:%";