https://github.com/osquery/osquery logo
z

Zweasta

07/10/2020, 8:50 PM
@seph how to know the package associated with a docker process ?
s

seph

07/10/2020, 9:50 PM
You’d have to get the path, and then look at the package table inside the container. There may not be a package. Depends on what the docker instance is
z

Zweasta

07/10/2020, 10:19 PM
ok, thanks!
4 Views