Not able to trigger dropped_executable
event
#4039
hammadahmed1985
started this conversation in
Adopters
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hi,
I am trying to trigger a
dropped_executable
event in my kubernetes cluster. I exec into a pod and run the following lines from the tracee-tester:cp "$(which uname)" /tmp
I have tried other things too but still no luck. I am using tracee version 0.20. The underlying
magic_write
seems to be getting detected fine as I can see those when I enable that policy. Any thoughts on what could be the issue?Beta Was this translation helpful? Give feedback.
All reactions