Patent ID: 11861007
Assignee: AMAZON TECHNOLOGIES, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 13:
14. A non-transitory computer-readable medium storing instructions which, when executed by one or more processors of a host computing device, cause the host computing device to implement a scanning agent to perform operations comprising:
receiving, by the scanning agent on a scanner container on the host computing device in a provider network, event data from a plurality of collection agents corresponding to a plurality of customer containers on the host computing device, wherein the host computing device is deployed as part of a container service of the provider network, wherein the host computing device is associated with a container capacity, and wherein at deployment a portion of the container capacity is reserved for one or more scanner containers, wherein the event data is based on or includes system calls intercepted by the plurality of collection agents;
determining, by the scanning agent, the event data matches at least one known threat; and
generating, by the scanning agent, event findings associated with the event data.