The VMware Carbon Black Tech Zone is live! Checkout this great resource: Mastering Carbon Black Audit & Remediation.

Docker Processes

Description: Information on Docker container processes.

What The Data Shows: Lists information on running container processes including the command line.

SQL: 

SELECT dc.name,substr(dcp.id,0,5) AS 'First 5 FROM ID',dcp.pid,cmdline 
FROM docker_container_processes AS dcp
JOIN docker_containers AS dc
  ON dc.id = dcp.id
WHERE dc.id IN (SELECT id FROM docker_containers);
0 Votes
1 Comment
Query_Admin
Community Manager
Community Manager
Status changed to: Approved