Docker Container Discovery Via Dockerenv Listing (11701de9-d5a5-44aa-8238-84252f131895)
Detects listing or file reading of ".dockerenv" which can be a sing of potential container discovery
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| System Information Discovery - T1082 (354a7f88-63fb-41b5-a801-ce3b377b36f1) | Attack Pattern | Docker Container Discovery Via Dockerenv Listing (11701de9-d5a5-44aa-8238-84252f131895) | Sigma-Rules | 1 |