We will dive into essential principles in container internals focused on container capabilities. We’ll describe how it works, how we can use specific container capabilities to pull off container escapes, and how to minimize the danger of this kind of attack.