Detecting Kubernetes Security Threats with Falco

Today we delve into the world of cyber security with Falco, a powerful open-source tool that detects and unveils unseen dangers. Learn how Falco can help businesses identify security threats in real-time, providing invaluable protection against potential breaches and attacks.

#Falco #Security #ThreatDetection #ContainerSecurity #KubernetesSecurity

▬▬▬▬▬▬ 🔗 Additional Info 🔗 ▬▬▬▬▬▬

▬▬▬▬▬▬ 💰 Sponsoships 💰 ▬▬▬▬▬▬

▬▬▬▬▬▬ 👋 Contact me 👋 ▬▬▬▬▬▬

▬▬▬▬▬▬ 🚀 Other Channels 🚀 ▬▬▬▬▬▬

▬▬▬▬▬▬ ⏱ Timecodes ⏱ ▬▬▬▬▬▬
00:00 Introduction to Run-Time Security
02:51 Falco Threat-Detection in Action
11:42 Falco Pros And Cons

[DevOpsToolkit]

What do you think of Falco? Is detection enough?

[IvanRizzante]

Thanks for the video! I totally agree, Falco drives me crazy. I hate the number of warnings you get with Falco, having to fine tune the rules and all the ceremonies that come with it, even if there are no competitors at the moment. Plus I still haven't found a customer that uses it yet! But you can't prevent without observing things so I guess we need to stick with Falco for now

[vanrayan]

Key thing is ensuring image immutability at runtime for any workloads, be it VM, K8s, Containers [Docker/Podman etc.] or Serverless. Look at Aqua security CWPP, it not only detects but also has the ability to block it.

[edb]

Very nice! I've been looking for something like this for my Homelab. Will definitely check this out...

[farzadmf]

Thank you for the video. Not sure if it's intentional or not, but the link for the gist is not a link :)

[MahomCloud]

Are there tools that do prevention on top of falco ?

[kevinyu]

Next, would you like to share your insights on Tetragon?

[faouri]

It would be interesting to talk about gVisor after this video

[vrabbi]

I am a much bigger fan of kubearmor and find falco WAY TOO