turbinia
turbinia copied to clipboard
Filter out processing of some docker containers
Some images can have a high number of docker containers when managed by GKE. This causes a very high number of Tasks to be generated. We should see if we can by default filter out some of the containers that is common infrastructure that is system managed and much less likely to contain things that our analysis Tasks would pick up (Plaso will still be running on the entire disk).
FYI, @rgayon
Consolidating into #1343