https://github.com/osquery/osquery logo
#ebpf
Title
# ebpf
a

alessandrogario

08/17/2022, 4:17 PM
@Artemis Tosini would something similar to this functionality be interesting for your future enhancements roadmap?
(Does not have to be this specific implementation, this was just some draft code I was playing with)
a

Artemis Tosini

08/17/2022, 4:21 PM
Interesting...
I was thinking I would add something like that to the processes table or you could search by prefix but this makes a lot of sense
A lot of fleet customers are using containerd which is a bit inconvenient. The default cgroup name seems to be
/default/<container name>
Or that might just be a runc thing
4 Views