Skip to content

Instantly share code, notes, and snippets.

@Saluki

Saluki/container-osquery_privileged.sql

Created January 25, 2019 14:15
Show Gist options
  • Save Saluki/ff8cb6d2c79721bc44b49bfbf08360d9 to your computer and use it in GitHub Desktop.
Save Saluki/ff8cb6d2c79721bc44b49bfbf08360d9 to your computer and use it in GitHub Desktop.
Download ZIP
MEDIUM - Container OSQuery - Privileged containers
Raw
container-osquery_privileged.sql
-- Detect privileged containers
SELECT name, image, status
FROM docker_containers
WHERE privileged=1;
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment