The DTA scanning process includes these steps:
- The DTA service pulls an image to Aqua servers.
- The service spins up a VM.
- The service runs the image as a container on the VM for several minutes.
- The service records and monitors network and disk activity, memory utilization, system calls, and more.
- The service classifies these activities in the form of behaviors and saves the scan result.
- The VM is tear down and the image is deleted from Aqua servers.