Container Scanning

[udi-mosh]

Version

2.4.90

Installation Method

Security Onion ISO image

Description

other (please provide detail below)

Installation Type

Distributed

Location

airgap

Hardware Specs

Meets minimum requirements

CPU

24

RAM

128

Storage for /

500GB

Storage for /nsm

6TB

Network Traffic Collection

tap

Network Traffic Speeds

1Gbps to 10Gbps

Status

Yes, all services on all nodes are running OK

Salt Status

No, there are no failures

Logs

No, there are no additional clues

Detail

Hello,
is there a support for container scanning ?
for docker engine native on linux ?
for docker desktop ?
10x

Guidelines

• I have read the discussion guidelines at Read before posting! #1720 and assert that I have followed the guidelines.

[dougburks]

is there a support for container scanning ?

container scanning could mean a few different things. What exactly are you trying to accomplish?

[udi-mosh]

basically, everything i can, like a real OS.
i am not looking for vulnerability checks (although it would be nice), i am looking for scanning network and security, OS and process operation and etc.
there are some other products that can monitor what going in the container through docker engine or Kubernetes and i am looking to achieve that .
another thing i am trying to achieve is monitoring MS WSL2 operations.

[dougburks]

Have you checked the Elastic documentation?
https://www.elastic.co/guide/en/fleet/8.14/install-elastic-agents-in-containers.html

[udi-mosh]

thank you very much. this can at list help me solve the container part.