A process executed a binary that threat intelligence identifies as malicious. This binary was not part of the original agentic workload.

This event strongly suggests that an attacker has control of the workload and is running malicious software.

A process loaded a library that threat intelligence identifies as malicious. This library was not part of the original agentic workload.

This event suggests that an attacker likely has control of the workload and is running malicious software.

A process executed a binary that threat intelligence identifies as malicious. This binary was part of the original agentic workload.

This event might suggest that an attacker is deploying a malicious workload. For example, the actor might have gained control of a legitimate build pipeline and injected the malicious binary into the agentic workload.

A process running inside the container attempted to bypass container isolation by using known exploit techniques or binaries, which threat intelligence identifies as potential threats. A successful escape can allow an attacker to access the host system and potentially compromise the entire environment.

This action suggests that an attacker is exploiting vulnerabilities to gain unauthorized access to the host system or broader infrastructure.

A process executed a Kubernetes-specific attack tool, which threat intelligence identifies as a potential threat.

This action suggests that an attacker has gained access to the cluster and is using the tool to exploit Kubernetes-specific vulnerabilities or configurations.

A process executed a local reconnaissance tool that is not typically part of the agentic workload. Threat intelligence identifies these tools as potential threats.

This event suggests that an attacker is trying to gather internal system information, such as mapping the infrastructure, identifying vulnerabilities, or collecting data on system configurations.

A machine learning model identified executed Python code as malicious. An attacker can use Python to download tools or files into a compromised environment and execute commands without using binaries.

The detector uses natural language processing (NLP) to analyze the Python code's content. Because this approach isn't based on signatures, detectors can identify known and novel malicious Python code.

A process executed a binary that threat intelligence identifies as malicious. This binary was part of the original agentic workload but was modified at runtime.

This event suggests that an attacker might have control of the workload and is running malicious software.

A process loaded a library that threat intelligence identifies as malicious. This library was part of the original agentic workload but was modified at runtime.

This event suggests that an attacker has control of the workload and is running malicious software.

A machine learning model identified executed Bash code as malicious. An attacker can use Bash to download tools or files into a compromised environment and execute commands without using binaries.

The detector uses NLP to analyze the Bash code's content. Because this approach is not based on signatures, detectors can identify known and novel malicious Bash code.

Agent Engine Threat Detection observed a malicious URL in the argument list of a running process.

The detector compares these URLs against the unsafe web resources lists maintained by the GoogleSafe Browsing service. If you believe that Google incorrectly classified a URL as a phishing site or malware, report the issue at Reporting Incorrect Data.

A process started with stream redirection to a remote connected socket. The detector looks forstdin bound to a remote socket.

A reverse shell allows an attacker to communicate from a compromised workload to an attacker-controlled machine. The attacker can then command and control the workload—for example, as part of a botnet.

A process that does not normally invoke shells unexpectedly spawned a shell process.

The detector monitors process executions and generates a finding when a known parent process spawns a shell unexpectedly.