Skip to main content
GET
/
accounts
/
{account_id}
/
container_runtime_insights
List Container Runtime Insights
curl --request GET \
  --url https://api.prd.rad.security/accounts/{account_id}/container_runtime_insights
{
  "entries": [
    {
      "accountID": "<string>",
      "analysis": [
        {
          "accountID": "<string>",
          "action": "<string>",
          "category": "<string>",
          "clusterID": "<string>",
          "createdAt": "<string>",
          "deletedAt": "<string>",
          "description": "<string>",
          "falsePositive": true,
          "falsePositiveMatchedRules": [
            "<string>"
          ],
          "falsePositiveReason": "<string>",
          "id": "<string>",
          "insightID": "<string>",
          "insightIDs": [
            "<string>"
          ],
          "llmProvider": "<string>",
          "maliciousProcessIDs": [
            "<string>"
          ],
          "mitreAttackTactics": [
            {
              "id": "<string>",
              "link": "<string>",
              "name": "<string>"
            }
          ],
          "mitreAttackTechniques": [
            {
              "id": "<string>",
              "link": "<string>",
              "name": "<string>",
              "tactics": [
                {}
              ]
            }
          ],
          "model": "<string>",
          "partial": true,
          "prompt": "<string>",
          "promptDigest": "<string>",
          "refs": [
            "<string>"
          ],
          "remediation": "<string>",
          "severity": "<string>",
          "stale": true,
          "status": "<string>",
          "totalRequests": 123,
          "triggeredBy": "<string>",
          "updatedAt": "<string>"
        }
      ],
      "baseline": {
        "apiVersion": "<string>",
        "containers": [
          {
            "id": "<string>",
            "imageDigest": "<string>",
            "imageName": "<string>",
            "name": "<string>",
            "processes": [
              {}
            ]
          }
        ],
        "kind": "<string>",
        "metadata": {
          "creationTimestamp": "<string>"
        }
      },
      "baselineCaptured": true,
      "baselineID": "<string>",
      "clusterID": "<string>",
      "createdAt": "<string>",
      "deletedAt": "<string>",
      "hasDrift": true,
      "id": "<string>",
      "llmAnalysis": {
        "accountID": "<string>",
        "action": "<string>",
        "category": "<string>",
        "clusterID": "<string>",
        "createdAt": "<string>",
        "deletedAt": "<string>",
        "description": "<string>",
        "falsePositive": true,
        "falsePositiveMatchedRules": [
          "<string>"
        ],
        "falsePositiveReason": "<string>",
        "id": "<string>",
        "insightID": "<string>",
        "insightIDs": [
          "<string>"
        ],
        "llmProvider": "<string>",
        "maliciousProcessIDs": [
          "<string>"
        ],
        "mitreAttackTactics": [
          {
            "id": "<string>",
            "link": "<string>",
            "name": "<string>"
          }
        ],
        "mitreAttackTechniques": [
          {
            "id": "<string>",
            "link": "<string>",
            "name": "<string>",
            "tactics": [
              {}
            ]
          }
        ],
        "model": "<string>",
        "partial": true,
        "prompt": "<string>",
        "promptDigest": "<string>",
        "refs": [
          "<string>"
        ],
        "remediation": "<string>",
        "severity": "<string>",
        "stale": true,
        "status": "<string>",
        "totalRequests": 123,
        "triggeredBy": "<string>",
        "updatedAt": "<string>"
      },
      "malicious": true,
      "ongoing": {
        "apiVersion": "<string>",
        "containers": [
          {
            "id": "<string>",
            "imageDigest": "<string>",
            "imageName": "<string>",
            "name": "<string>",
            "processes": [
              {}
            ]
          }
        ],
        "kind": "<string>",
        "metadata": {
          "creationTimestamp": "<string>"
        }
      },
      "severity": "<string>",
      "state": "<string>",
      "summary": {
        "container_meta": {
          "container_id": "<string>",
          "container_image_digest": "<string>",
          "container_image_name": "<string>",
          "container_name": "<string>",
          "runtime_name": "<string>"
        },
        "createdAt": "<string>",
        "deletedAt": "<string>",
        "kube_meta": {
          "cluster_id": "<string>",
          "container_name": "<string>",
          "namespace": "<string>",
          "node_name": "<string>",
          "pod_name": "<string>"
        }
      },
      "updatedAt": "<string>"
    }
  ],
  "page": 123,
  "page_count": 123,
  "page_size": 123,
  "total_count": 123
}

Path Parameters

​
account_id
string
required

Account id

Query Parameters

​
cluster_ids
string

Cluster ids

​
namespaces
string

Kubernetes namespaces

​
pod_names
string

Kubernetes Pod names

​
container_names
string

Container names

​
container_image_digests
string

Container image digests

​
drift_only
boolean

Only return insights with drift

​
include_states
string

Comma-separated insight states to include. One of: no_data, capturing_baseline, baseline_captured, drift_detected

​
exclude_states
string

Comma-separated insight states to exclude. Takes priority over include_states. One of: no_data, capturing_baseline, baseline_captured, drift_detected

​
running_only
boolean

Only return insights for Running containers

​
q
string

Query string to filter insights

​
page
integer

Page number starting from 1

​
page_size
integer

Page size. Default: 50

​
sort
string

Sort by field. Default: created_at:desc

Response

OK

​
entries
object[]
​
page
integer
​
page_count
integer
​
page_size
integer
​
total_count
integer