Potential Container Discovery Via Inodes Listing

SigmaHQ Detections@sigmaHQ

•updated Nov 25, 2025•0•0•0

Detects listing of the inodes of the "/" directory to determine if the we are running inside of a container.