Two tools are pre-installed on the cluster's worker node:
Using the tool of your choice (including any non pre-installed tool), analyze the container's behavior for at least 30 seconds, using filters that detect newly spawning and executing processes.
Store an incident file at /opt/KSRS00101/alerts/details, containing the detected incidents, one per line, in the following format:
The following example shows a properly formatted incident file:
Gail
8 months agoAmmie
7 months agoLenora
7 months agoIraida
7 months agoTayna
7 months agoCasie
8 months agoYoulanda
8 months agoMalinda
8 months agoLajuana
8 months agoBeth
8 months agoTracey
9 months agoPortia
7 months agoPamella
8 months agoGlen
8 months agoIrene
8 months agoCelestine
9 months agoMarsha
9 months agoKarma
9 months agoBilly
9 months agoTamar
9 months agoTamie
9 months agoCelestine
9 months agoTamie
10 months ago