Container Residence Discovery Via Proc Virtual FS — Detection Rule
Detects potential container discovery via listing of certain kernel features in the "/proc" virtual filesystem
Detects potential container discovery via listing of certain kernel features in the "/proc" virtual filesystem