Saluki/container-osquery_privileged.sql

Created January 25, 2019 14:15

Star () You must be signed in to star a gist
Fork () You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/Saluki/ff8cb6d2c79721bc44b49bfbf08360d9.js"></script>
Save Saluki/ff8cb6d2c79721bc44b49bfbf08360d9 to your computer and use it in GitHub Desktop.

Download ZIP

MEDIUM - Container OSQuery - Privileged containers

Raw

container-osquery_privileged.sql

	-- Detect privileged containers
	SELECT name, image, status
	FROM docker_containers
	WHERE privileged=1;

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment