AquaSec Tracee docs are not allowed during CKS, instead of using Tracee, can we use strace and pstree command to check the syscall? Do the VM have strace and pstree binaries pre-installed? @Mumshad Mannambeth @Vijin Palazhi
strace should be installed by default , yes.
Tracee is an addon lecture t help understand syscalls generated by containers but yes you cannot access the docs during the exam and you wouldn’t need to.