K8s Shell Executionvia Cat Redirection

Danny Y@zendannyy

•updated Mar 20, 2026•2•0•56

Detects interactive shell execution within a container in a production, using 'exec'. The execution of `cat`, followed by network connections. This would be communicating with a service that runs arbitrary commands.