The requirements are runtime threat detection for containers that specifically detects activities like loading additional libraries or executing malicious scripts, with findings visible in Security Command Center (SCC).
Container Threat Detection (CTD) is the specific SCC service component designed to monitor container runtimes for suspicious events like reverse shells, suspicious library loading, and execution of malicious scripts. It is available only with the Security Command Center Premium tier.
Extracts:
"Container Threat Detection (CTD) is a Security Command Center Premium service that provides runtime threat detection for Google Kubernetes Engine (GKE) and Kubernetes clusters." (Source 4.1)
"CTD detects specific runtime events, such as: Execution of malicious scripts... Loading of suspicious libraries... CTD creates high-fidelity Security Command Center findings for these threats." (Source 4.2)
"Security Health Analytics (Option C) identifies misconfigurations and compliance violations, such as overly permissive IAM roles or open firewall ports, but it does not perform runtime threat detection." (Source 4.3) While using log-based metrics (Option D) is possible, enabling CTD (Option B) is the specific, managed, and authoritative way to generate verified runtime threat findings directly within Security Command Center as required by the prompt.