I know that namespaces are not part of process_events table so its hard to differentiate docker containers from vms