detecting-container-drift-at-runtime
mukul975/Anthropic-Cybersecurity-Skills
Monitors running containers for unauthorized binary execution, filesystem writes, package installs, and configuration changes, pairing Falco rules, Kubernetes enforcement, and digest verification to flag deviations from the immutable image.