Container and cluster hunting¶

Runbooks for hunting container escape attempts, privileged pod abuse, Kubernetes RBAC misconfiguration, and API server anomalies from compromised service account tokens.