Container Residence Discovery Via Proc Virtual FS

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•1

Detects potential container discovery via listing of certain kernel features in the "/proc" virtual filesystem