Secure your container environment with CrowdStrike Falcon security
summary
CrowdStrike Falcon Cloud Security scans images in pipelines and registries (supports 16 registries), runs dynamic sandbox analysis, and enforces policies via a Kubernetes admission controller that blocks deployment via Kubernetes admission controller when assessments find critical CVEs. Demo shows one image with 549 total and 306 critical/high findings which Falcon’s Expert AI reprioritizes to 12 actionable items. Deployments use CloudFormation stack sets, EventBridge for near‑real‑time CloudTrail ingestion, DaemonSets for nodes and sidecars for Fargate, and the admission policy prevents a vulnerable WebDVWA pod from launching.
AI-written summary · about
chapters (9)
- 0:00Introduction and landscape
- 1:36Cloud security threats
- 7:13Container security challenges
- 12:07Crowdstrike Falcon overview
- 15:34Pre-runtime image security
- 22:12Admission controller demo
- 30:27AWS Integration best practices
- 36:07Detection and prevention
- 41:31ROI and next steps
related talks
49mEnhance container security with CrowdStrike Falcon Cloud Security
51mInnovate with AWS and secure with CrowdStrike
50mRuntime Security for Containers
38mOpen Source Security Tools for Kubernetes Applications
43mClouds in the forecast: CrowdStrike cloud risk report
33mFIND, FOCUS, and FIX the Container and Cloud Threats that Matter
29mDetecting cloud and container threats
43m6 Strategies to Bring Order to Kubernetes Security Disruptions