mirror of
https://github.com/falcosecurity/falco.git
synced 2025-06-30 16:42:14 +00:00
docs: adding the kubernetes privileged use case to use cases
Co-Authored-By: Leonardo Di Donato <leodidonato@gmail.com> Co-Authored-By: Leonardo Grasso <me@leonardograsso.com> Co-Authored-By: Massimiliano Giovagnoli <massimiliano.giovagnoli.1992@gmail.com> Co-Authored-By: Jonah Jones <jonahjones094@gmail.com> Signed-off-by: Lorenzo Fontana <lo@linux.com>
This commit is contained in:
parent
2b2856299c
commit
dada3db3f2
@ -65,6 +65,7 @@ For example, Falco can easily detect incidents including but not limited to:
|
||||
- Unexpected read of a sensitive file, such as `/etc/shadow`.
|
||||
- A non-device file is written to `/dev`.
|
||||
- A standard system binary, such as `ls`, is making an outbound network connection.
|
||||
- A privileged pod is started in a Kubernetes cluster.
|
||||
|
||||
### Documentation
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user