Built off the open source project Osquery
Description: Information on Docker container processes.
What The Data Shows: Lists information on running container processes including the command line.
SQL:
SELECT dc.name,substr(dcp.id,0,5) AS 'First 5 FROM ID',dcp.pid,cmdline
FROM docker_container_processes AS dcp
JOIN docker_containers AS dc
ON dc.id = dcp.id
WHERE dc.id IN (SELECT id FROM docker_containers);
Copyright © 2005-2023 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.