devent:<id:"b68a3cad5d5d6bbf4d8aade6e2cf44b8ac48a558847f2ba29f161643f662a04b" process_id:"03898b535a31bf119a278ba303821db365bbfbc90b662442bfad867a7a45ba13" process_pid:55491 process_ppid:55490 container_id:"fa1bbdc40c6da9551e818609a8b9b0cf3728bbf631c74d17ba97dbffaef003bf" sensor_id:"9db9f9993b941df1313240a0f4326460563fc985a60b5da53175aa38db09da5a" sensor_sequence_number:62624 sensor_monotime_nanos:1650971466000562907 container_name:"/laughing_visvesvaraya" image_id:"2caf248e52e074f3c378d0ba0beae73ffca96bb1e2f5f66ee0163284b266018e" image_name:"ubuntu" process:<type:PROCESS_EVENT_TYPE_EXEC exec_filename:"/usr/bin/groups" exec_command_line:"groups" cmdline:"groups" name:"groups" aname:"bash" aname:"bash" fdList:<pid:"55491" fdDetails:<type:99 > fdDetails:<type:99
容器内bash会被脚本附加的情况分析
于 2022-04-29 14:05:00 首次发布