Note: This content is specific to Containers and Kubernetes. For additional documentation that more broadly describes the Process Analysis page in the Carbon Black Cloud console, see Process Analysis.

Procedure

  1. On the left navigation pane, click Investigate > Processes.
  2. Perform a search query for events associated with Containers or Kubernetes.
  3. In the results table, click the Process Analysis Right arrow icon at the right of the row.

    The Process Analysis tree displays. For example:

    Example process analysis tree for a K8s Cluster event

    The information in the right panel depends on the type of event searched for and selected. The following topics describe each selection by filtered event type. For example:

    Example data panel for Containers events
    • Click View more to view the Kubernetes Workloads page. See View Kubernetes Workloads.
    • To investigate Kubernetes cluster configuration issues, click the number associated with Configuration risks. See View a Kubernetes Workload - Risks.
    • To investigate Kubernetes cluster vulnerabilities, click the number associated with Vulnerabilities. See View a Kubernetes Workload - Risks and click any link in the Vulnerability column for more information about that vulnerability.