Threat Stack is transitioning to a new brand: App Infrastructure Protection (AIP). Until this process completes in December 2022, documentation will use "Threat Stack" and "AIP" interchangeably. For more information, see Introduction to AIP.
FAQ: Why am I seeing Docker events when containerd monitoring is on and Docker monitoring is off?
The Docker runtime is built on top of the containerd runtime. As a result, any Docker activity reports through the containerd runtime event stream when you enable App Infrastructure Protection (AIP) containerd monitoring.