Views:

Monitor security events across your containers, including deployment and runtime policy violations, vulnerabilities, malware, secrets, file integrity changes, Kubernetes audit logs, and pre-runtime container image scanning results.

Deployment/continuous
View policy violations detected by runtime behavior monitoring.
Runtime behavior monitoring
View activity on your running containers that violates your runtime behavior monitoring rulesets. Learn how to enable runtime behavior monitoring on Kubernetes clusters.
Runtime vulnerabilities
View vulnerabilities detected on clusters by runtime vulnerability assessment.
Runtime malware
View malware detections found on your running containers by runtime malware scan.
Runtime secrets
View secret leaks detected in your running containers. Learn how to enable runtime secrets scan on Kubernetes clusters.
File integrity monitoring
View file changes detected in critical areas of your containers by file integrity monitoring.
Kubernetes audit log
View Kubernetes API server audit events collected from your clusters. Learn how to enable audit log collection.
Container image scanning
Learn how to set up and deploy artifact scanners in your CI/CD pipelines. After artifact scanning is set up, you can view the scan results of registry image artifacts for vulnerabilities, malware, and secrets from this page.
Runtime behavior monitoring detects security policy violations in your existing clusters. Once a violation is detected on a container, the detection displays. The Events screen outlines the different types of policies deployed to your containers:
  • Continuous, Runtime malware, Runtime secrets: Kubernetes only policies
  • Deployment, Runtime vulnerabilities, Runtime behavior monitoring, File integrity monitoring: Kubernetes or Amazon ECS policies

Deployment/continuous

The following table outlines the actions available in Deployment/continuous.
Action
Description
Filter the displayed data
Click Filter and select one or more of the following filters.
  • Action
  • Mitigation
  • Policy
  • Cluster
  • Namespace
  • Operation
  • Kind
  • Time
Locate triggered policies
Click the Policy link to locate the policy that triggered the detection in the Policies tab.
Export a list of events
Click the Export button to create and download a .CSV file listing all the events on the page.
Locate the affected clusters
Click the Cluster link to redirect and locate the affected cluster in Container Security.
Related information