Privileged Container Deployed via Docker API
Detects deployment of privileged Docker containers that may allow container escape
Microsoft Sentinel (KQL)

Detects deployment of privileged Docker containers that may allow container escape

Already have an account?