Sysdig Sponsored Session
Talkat Cloud Native Security Day 2019 · on Monday, 2019-11-18· at 10:50· Marriott Marquis San Diego Marina - San Diego Ballroom A, 333 W Harbor Dr·
summary
Open source Falco performs runtime threat detection for Kubernetes by capturing system calls with an agent using eBPF, ingesting Kubernetes audit events and metadata, and emitting real‑time alerts for actions like exec into a container or modification of system binaries. Falco runs as a DaemonSet so no container changes are required. Sysdig packages this into Sysdig Secure, which centralizes alerts, stores event captures for forensics, and ties into tools like Prometheus; a live demo reports immediate alerts on shell and file change events.
AI-written summary · about
