Cheat Sheet
Container Investigations Cheat Sheet
Full container images include a full operating system, offering more flexibility and familiarity for forensic investigations compared to distroless containers. However, they can also present a larger attack surface.
This cheat sheet provides an overview of containers, including distroless containers, investigation techniques, and quick tips for container DFIR.