Patent ID: 11861007
Assignee: AMAZON TECHNOLOGIES, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 9:
10. A system comprising:
a first one or more electronic devices to implement a control plane of a container service in a multi-tenant provider network, the control plane to configure at least a host of the container service; and
the host implementing a scanner container and a plurality of customer containers, the scanner container including instructions that upon execution cause the scanner container to:
receiving, by a scanning agent of the scanner container, event data from a plurality of collection agents corresponding to a plurality of customer containers on the host, wherein the host is associated with a container capacity, and wherein at deployment a portion of the container capacity is reserved for one or more scanner containers, wherein the event data is based on or includes system calls intercepted by the plurality of collection agents;
determine, by the scanning agent, the event data matches at least one known threat; and
generate, by the scanning agent, event findings associated with the event data.