deepfence / deepfence/YaraHunter

Scan running Kubernetes containers

Open
#14 0 comments 1 reaction 0 assignees View on GitHub
enhancement help wanted
Dominant language
Go
Stars
1.3k
Forks
155
PR merge metrics
No merged PRs in 30d

Description

Requirement: I am running pods in Kubernetes and I have reason to suspect that one of the containers may have been compromised (high CPU, unexpected network, or just a desire for routine verification). I wish to run IOCScanner against workloads on my Kubernetes cluster.

Use Cases:
* Run IOCScanner against a single container (provide container ID, pod ID, node ID): IOCScanner scans that single container
* Run IOCScanner against a named pod (provide pod ID): IOCScanner locates that pod on the cluster and scans the containers within
* Run IOCScanner against a named selector (e.g. service name, label etc): IOCScanner locates all matching pods and scans all of the containers within

Documentation Requirements:
* How to satisfy each use case interactively and identify potentially-compromised workloads
* How to satisfy each use case non-interactively and identify potentially-compromised workloads

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.