Containers

Kubernetes enhancement for windows worker node

You can now install the Kubernetes DaemonSet agents and enforce policies on Windows nodes of Kubernetes pods. The DaemonSet agent installation supports Windows Server 2019 and 2022.

For more information, see Installing Kubernetes or OpenShift Agents for Deep Visibility and Enforcement.

Container run-time vulnerability detection

With the Pod Vulnerability Scanning option, you can now choose pods in a Kubernetes cluster to scan for vulnerabilities.

Under Manage > Kubernetes, you can view the CVEs and container images that are associated with the pods running within the Kubernetes clusters. The Registry List displays all detected registries.

For more information, see Container Vulnerability Scanning.

Product Evolution

Process visibility of real time events on AIX

You can now capture forensic events from AIX for advanced process visibility. Using the AIX audit system, the following events are captured- Privilege Escalation, Raw Socket Creation, and User Account.

For more information, see Forensics Signals.