If you have osquery running on one machine and docker on that same machine, can you see processes running within the container utilizing osquery?
Thread in Slack Conversation
cburr: I just created a pull request:
https://github.com/facebook/osquery/pull/3241
docker_container_processes lists processes running inside container 🙂