Two tools are pre-installed on the cluster's worker node:
Using the tool of your choice (including any non pre-installed tool), analyze the container's behavior for at least 30 seconds, using filters that detect newly spawning and executing processes.
Store an incident file at /opt/KSRS00101/alerts/details, containing the detected incidents, one per line, in the following format:
The following example shows a properly formatted incident file:
Gail
2 months agoAmmie
22 days agoLenora
23 days agoIraida
24 days agoTayna
25 days agoCasie
2 months agoYoulanda
3 months agoMalinda
2 months agoLajuana
2 months agoBeth
2 months agoTracey
3 months agoPortia
1 months agoPamella
2 months agoGlen
2 months agoIrene
2 months agoCelestine
3 months agoMarsha
3 months agoKarma
3 months agoBilly
3 months agoTamar
3 months agoTamie
3 months agoCelestine
4 months agoTamie
4 months ago