Скачать или смотреть Container Host Security - Monitor and Alert on Security Threats with Falco

Container Host Security refers to the ability to detect, report, and respond to attacks on containerized infrastructure and workloads. For CHS, GitLab uses Falco to listen to the Linux kernel using eBPF.

Falco parses system calls and asserts the stream against a configurable rules engine in real-time.

In this video, we will go over the following:
0:37 - Introduction
1:04 - Adding Falco to your Kubernetes Cluster
2:16 - Adding a Custom Rule
3:09 - Demo of Falco Rule Detection on Kubernetes
4:26 - Overview of Falco Alerts
5:04 - Falco Roadmap

Resources:
Falco Installation/Configuration Documentation: https://docs.gitlab.com/ee/user/clust...
Falco Usage Documentation: https://falco.org/docs/
GitLab Container Host Security Direction Page: https://about.gitlab.com/direction/pr...
Get in touch with Sales: http://bit.ly/2IygR7z