Two tools are pre-installed on the cluster's worker node:
Using the tool of your choice (including any non pre-installed tool), analyze the container's behavior for at least 30 seconds, using filters that detect newly spawning and executing processes.
Store an incident file at /opt/KSRS00101/alerts/details, containing the detected incidents, one per line, in the following format:
The following example shows a properly formatted incident file:
Gail
1 months agoCasie
1 months agoYoulanda
1 months agoMalinda
18 days agoLajuana
23 days agoBeth
25 days agoTracey
2 months agoPortia
7 days agoPamella
16 days agoGlen
17 days agoIrene
23 days agoCelestine
2 months agoMarsha
2 months agoKarma
2 months agoBilly
2 months agoTamar
2 months agoTamie
2 months agoCelestine
2 months agoTamie
2 months ago