Skip to main content
GET
/
accounts
/
{account_id}
/
container_runtime_insights
List Container Runtime Insights
curl --request GET \
  --url https://api.prd.rad.security/accounts/{account_id}/container_runtime_insights
{
  "entries": [
    {
      "accountID": "<string>",
      "analysis": [
        {
          "accountID": "<string>",
          "action": "<string>",
          "category": "<string>",
          "clusterID": "<string>",
          "createdAt": "<string>",
          "deletedAt": "<string>",
          "description": "<string>",
          "falsePositive": true,
          "falsePositiveMatchedRules": [
            "<string>"
          ],
          "falsePositiveReason": "<string>",
          "id": "<string>",
          "insightID": "<string>",
          "insightIDs": [
            "<string>"
          ],
          "llmProvider": "<string>",
          "maliciousProcessIDs": [
            "<string>"
          ],
          "mitreAttackTactics": [
            {
              "id": "<string>",
              "link": "<string>",
              "name": "<string>"
            }
          ],
          "mitreAttackTechniques": [
            {
              "id": "<string>",
              "link": "<string>",
              "name": "<string>",
              "tactics": [
                {
                  "id": "<string>",
                  "link": "<string>",
                  "name": "<string>"
                }
              ]
            }
          ],
          "model": "<string>",
          "partial": true,
          "prompt": "<string>",
          "promptDigest": "<string>",
          "refs": [
            "<string>"
          ],
          "remediation": "<string>",
          "severity": "<string>",
          "stale": true,
          "status": "<string>",
          "totalRequests": 123,
          "triggeredBy": "<string>",
          "updatedAt": "<string>"
        }
      ],
      "baseline": {
        "apiVersion": "<string>",
        "containers": [
          {
            "id": "<string>",
            "imageDigest": "<string>",
            "imageName": "<string>",
            "name": "<string>",
            "processes": [
              {
                "children": "<array>",
                "connections": [
                  {
                    "address": "<string>",
                    "drift": true,
                    "hostname": "<string>",
                    "k8sName": "<string>",
                    "k8sNamespace": "<string>",
                    "port": 123,
                    "timestamp": "<string>",
                    "trustedCIDR": "<string>"
                  }
                ],
                "drift": true,
                "files": [
                  {
                    "drift": true,
                    "path": "<string>",
                    "timestamp": "<string>"
                  }
                ],
                "gid": 123,
                "id": "<string>",
                "parentId": "<string>",
                "programs": [
                  {
                    "args": [
                      "<string>"
                    ],
                    "comm": "<string>",
                    "drift": true,
                    "hasPattern": true,
                    "sampleArgs": [
                      [
                        "<string>"
                      ]
                    ],
                    "timestamp": "<string>"
                  }
                ],
                "repetition": {
                  "execCount": 123,
                  "recentTimestamp": "<string>"
                },
                "timestamp": "<string>",
                "trustedIPPrefixes": [
                  {
                    "cidr": "<string>",
                    "name": "<string>",
                    "port": 123
                  }
                ],
                "uid": 123
              }
            ]
          }
        ],
        "kind": "<string>",
        "metadata": {
          "creationTimestamp": "<string>"
        }
      },
      "baselineCaptured": true,
      "baselineID": "<string>",
      "clusterID": "<string>",
      "createdAt": "<string>",
      "deletedAt": "<string>",
      "hasDrift": true,
      "id": "<string>",
      "llmAnalysis": {
        "accountID": "<string>",
        "action": "<string>",
        "category": "<string>",
        "clusterID": "<string>",
        "createdAt": "<string>",
        "deletedAt": "<string>",
        "description": "<string>",
        "falsePositive": true,
        "falsePositiveMatchedRules": [
          "<string>"
        ],
        "falsePositiveReason": "<string>",
        "id": "<string>",
        "insightID": "<string>",
        "insightIDs": [
          "<string>"
        ],
        "llmProvider": "<string>",
        "maliciousProcessIDs": [
          "<string>"
        ],
        "mitreAttackTactics": [
          {
            "id": "<string>",
            "link": "<string>",
            "name": "<string>"
          }
        ],
        "mitreAttackTechniques": [
          {
            "id": "<string>",
            "link": "<string>",
            "name": "<string>",
            "tactics": [
              {
                "id": "<string>",
                "link": "<string>",
                "name": "<string>"
              }
            ]
          }
        ],
        "model": "<string>",
        "partial": true,
        "prompt": "<string>",
        "promptDigest": "<string>",
        "refs": [
          "<string>"
        ],
        "remediation": "<string>",
        "severity": "<string>",
        "stale": true,
        "status": "<string>",
        "totalRequests": 123,
        "triggeredBy": "<string>",
        "updatedAt": "<string>"
      },
      "malicious": true,
      "ongoing": {
        "apiVersion": "<string>",
        "containers": [
          {
            "id": "<string>",
            "imageDigest": "<string>",
            "imageName": "<string>",
            "name": "<string>",
            "processes": [
              {
                "children": "<array>",
                "connections": [
                  {
                    "address": "<string>",
                    "drift": true,
                    "hostname": "<string>",
                    "k8sName": "<string>",
                    "k8sNamespace": "<string>",
                    "port": 123,
                    "timestamp": "<string>",
                    "trustedCIDR": "<string>"
                  }
                ],
                "drift": true,
                "files": [
                  {
                    "drift": true,
                    "path": "<string>",
                    "timestamp": "<string>"
                  }
                ],
                "gid": 123,
                "id": "<string>",
                "parentId": "<string>",
                "programs": [
                  {
                    "args": [
                      "<string>"
                    ],
                    "comm": "<string>",
                    "drift": true,
                    "hasPattern": true,
                    "sampleArgs": [
                      [
                        "<string>"
                      ]
                    ],
                    "timestamp": "<string>"
                  }
                ],
                "repetition": {
                  "execCount": 123,
                  "recentTimestamp": "<string>"
                },
                "timestamp": "<string>",
                "trustedIPPrefixes": [
                  {
                    "cidr": "<string>",
                    "name": "<string>",
                    "port": 123
                  }
                ],
                "uid": 123
              }
            ]
          }
        ],
        "kind": "<string>",
        "metadata": {
          "creationTimestamp": "<string>"
        }
      },
      "severity": "<string>",
      "state": "<string>",
      "summary": {
        "container_meta": {
          "container_id": "<string>",
          "container_image_digest": "<string>",
          "container_image_name": "<string>",
          "container_name": "<string>",
          "runtime_name": "<string>"
        },
        "createdAt": "<string>",
        "deletedAt": "<string>",
        "kube_meta": {
          "cluster_id": "<string>",
          "container_name": "<string>",
          "namespace": "<string>",
          "node_name": "<string>",
          "pod_name": "<string>"
        }
      },
      "updatedAt": "<string>"
    }
  ],
  "page": 123,
  "page_count": 123,
  "page_size": 123,
  "total_count": 123
}

Path Parameters

​
account_id
string
required

Account id

Query Parameters

​
cluster_ids
string

Cluster ids

​
namespaces
string

Kubernetes namespaces

​
pod_names
string

Kubernetes Pod names

​
container_names
string

Container names

​
container_image_digests
string

Container image digests

​
drift_only
boolean

Only return insights with drift

​
include_states
string

Comma-separated insight states to include. One of: no_data, capturing_baseline, baseline_captured, drift_detected

​
exclude_states
string

Comma-separated insight states to exclude. Takes priority over include_states. One of: no_data, capturing_baseline, baseline_captured, drift_detected

​
running_only
boolean

Only return insights for Running containers

​
q
string

Query string to filter insights

​
page
integer

Page number starting from 1

​
page_size
integer

Page size. Default: 50

​
sort
string

Sort by field. Default: created_at:desc

Response

OK

​
entries
object[]
​
page
integer
​
page_count
integer
​
page_size
integer
​
total_count
integer