Results for “container-runtime”
19 skills
mukul975 detecting-container-escape-attempts
Detect container escape attempts using runtime security tools like Falco, Sysdig, and custom seccomp/audit rules.
24.6k · bundle
mukul975 detecting-container-drift-at-runtime
Detect unauthorized modifications to running containers by monitoring for binary execution drift, file system changes, and configuration deviations from the original container image.
24.6k · bundle
mukul975 detecting-container-runtime-threats-with-falco
Write and deploy Falco rules with the modern eBPF driver to detect container escape, namespace abuse, privileged mounts, and anomalous syscalls at runtime in Kubernetes and Docker.
24.6k · bundle
chimeranext container-security
Implements container security with image scanning, runtime protection, image signing, and security policies using tools like Falco, Trivy, and Notary.
4 · bundle
mukul975 detecting-container-escape-with-falco-rules
Detect container escape attempts in real-time using Falco runtime security rules that monitor syscalls, file access, and privilege escalation.
24.6k · bundle
More results
mukul975 analyzing-docker-container-forensics
Investigate compromised Docker containers by analyzing images, layers, volumes, logs, and runtime artifacts to identify malicious activity and evidence.
24.6k · bundle
cloudthinker-ai analyzing-aqua
Analyzes container security posture, image assurance, compliance, and runtime alerts on the Aqua Security platform via its API.
7
mukul975 performing-container-escape-detection
Audits Kubernetes pods for container escape vectors by analyzing privileged mode, dangerous capabilities, host namespace sharing, and writable hostPath mounts using the Kubernetes Python client.
24.6k · bundle
mukul975 implementing-cloud-workload-protection
Monitors cloud workloads for runtime threats by checking process lists, network connections, file integrity, and resource utilization anomalies on EC2 and GCE instances.
24.6k · bundle
zhaoxuya520 cloud-k8s
Authorized security assessment for cloud, container, and Kubernetes environments covering metadata SSRF, IAM misconfigurations, container escape paths, and cluster RBAC review.
12.8k · bundle
snoodleboot-io container-security-hardening
A container image is an attack surface you chose.
2
mukul975 escaping-containers-to-host
Exploit privileged pods, host mounts, runC CVEs, and exposed Docker sockets to break out of a container and reach the underlying host during authorized container-security assessments.
24.6k · bundle
zhaoxuya520 competition-web-runtime
Inspects web behavior, browser state, server routing, API order, and worker-backed application flow within a sandboxed CTF environment.
12.8k · bundle
zhaoxuya520 competition-runtime-routing
Traces which sandbox node, proxy rule, or header-derived branch serves a live request in a CTF competition environment.
12.8k · bundle
diegosouzapw none
Detect container escape attempts using Falco, seccomp, and auditd, with rules for privileged containers, Docker socket access, and kernel module loading.
54 · bundle
mukul975 hardening-docker-containers-for-production
Apply CIS Docker Benchmark v1.8.0 security best practices to harden Docker containers for production, covering daemon configuration, image building, runtime controls, and auditing.
24.6k · bundle
mukul975 performing-cloud-native-forensics-with-falco
Deploys and manages Falco YAML rules for runtime threat detection in containers and Kubernetes, monitoring syscalls for shell spawns, file tampering, network anomalies, and privilege escalation. Parses Falco alerts for incident response.
24.6k · bundle
mukul975 implementing-container-image-minimal-base-with-distroless
Reduce container attack surface by building application images on Google distroless base images that contain only the application runtime with no shell, package manager, or unnecessary OS utilities.
24.6k · bundle
zhaoxuya520 competition-agent-cloud
Specialized CTF sandbox skill for analyzing prompt-to-tool chains, deployment drift, and supply-chain provenance in cloud, container, and CI/CD environments.
12.8k · bundle