CPC G06F 21/121 (2013.01) [G06F 9/3891 (2013.01); G06F 16/182 (2019.01); G06F 16/90335 (2019.01)] | 25 Claims |
1. A computer-implemented method for determining command-to-process correspondence, comprising:
identifying, by a hardware processor, initial processes resulting from executions of container immutability change events for each of multiple initially mutable containers in a cluster, based on an execution time, a process identifier and a process group identifier for each of the container immutability change events; and
designating, by the hardware processor, a particular external command, from among the external container commands stored in a database, as having a correspondence to an initial process, responsive to the initial process matching at least one respective process resulting from executing the particular external command.
|