2026-11-09T06:09:37Z INF event event="Custom T1059.004 Non Interactive Shell" output="2026-11-09T06:09:37.062115544+0000: Warning CUSTOM T1059.004 - Shell non interactif (user=root command=sh -c cat /etc/shadow >/dev/null parent=<NA> container=cible1 pod=cible1)" priority=Warning source=syscall trace_id=32764c58a4fc78fff26fbd0a858d4d1c
2026-11-09T06:09:37Z INF event event="Read sensitive file untrusted" output="2026-11-09T06:09:37.069036229+0000: Warning Sensitive file opened for reading by non-trusted program | file=/etc/shadow gparent=<NA> ggparent=<NA> gggparent=<NA> evt_type=openat user=root user_uid=0 user_loginuid=-1 process=cat proc_exepath=/usr/bin/cat parent=sh command=cat /etc/shadow terminal=0" priority=Warning source=syscall trace_id=045388ced435df327db5854aa90df30f