Two tools are pre-installed on the cluster's worker node:
Using the tool of your choice (including any non pre-installed tool), analyze the container's behavior for at least 30 seconds, using filters that detect newly spawning and executing processes.
Store an incident file at /opt/KSRS00101/alerts/details, containing the detected incidents, one per line, in the following format:
The following example shows a properly formatted incident file:
Gail
7 months agoAmmie
5 months agoLenora
5 months agoIraida
5 months agoTayna
5 months agoCasie
7 months agoYoulanda
7 months agoMalinda
6 months agoLajuana
6 months agoBeth
6 months agoTracey
7 months agoPortia
6 months agoPamella
6 months agoGlen
6 months agoIrene
6 months agoCelestine
8 months agoMarsha
8 months agoKarma
7 months agoBilly
7 months agoTamar
8 months agoTamie
8 months agoCelestine
8 months agoTamie
8 months ago