K8s Shell Executionvia Cat Redirection

Danny Y@zendannyy

•updated Jun 3, 2026•0•0•4

Detects interactive shell execution within a container in a production, using 'exec'. The execution of `cat`, followed by network connections. This could be communicating with a service that runs arbitrary commands.