awesome-kubernetes-threat-detection

By Andrew Martin, Michael Hausenblas [ ] [ ]

by Brendan Creane, Amit Gupta [ ]

by Jed Salazar and Natalia Reka Ivanko

Gray Hat Hacking, 6th Ed. (relevant chapters) By Allen Harper, Ryan Linn, Stephen Sims, Michael Baucom, Huascar Tejeda, Daniel Fernandez, Moses Frost [ ]

[ ]

[ ]

by Bilgin Ibryam and Roland Huss [ ]

by Liz Rice [ ]

eBPF Summit [ ] [ ] [ ]

[ ]

"can be used to sandbox the privileges of a process, restricting the calls it is able to make from userspace into the kernel."

"AppArmor is a Linux kernel security module that supplements the standard Linux user and group based permissions to confine programs to a limited set of resources. AppArmor can be configured for any application to reduce its potential attack surface and provide greater in-depth defense."

OPA Gatekeeper

"A customizable cloud native policy controller that helps enforce policies and strengthen governance"

Stratus Red Team

Stratus Red Team is "Atomic Red Team™" for the cloud, allowing to emulate offensive attack techniques in a granular and self-contained manner

Kubernetes Attacks

see

minikube

minikube implements a local Kubernetes cluster on macOS, Linux, and Windows. minikube's primary goals are to be the best tool for local Kubernetes application development and to support all Kubernetes features that fit

m9sweeper

"m9sweeper is a free and easy kubernetes security platform. It integrates industry-standard open source utilities into a one-stop-shop kubernetes security tool that can walk most kubernetes adminstrators through securing a kubernetes cluster as well as the apps running on the cluster."

"Software Composition Analysis from Code to Cloud: Enables security teams to find every piece of software in cloud native applications. Block and fix security issues in minutes rather than days."

"Prisma Cloud secures applications from code to cloud, enabling security and DevOps teams to effectively collaborate to accelerate secure cloud-native application development and deployment."

"Sysdig is a universal system visibility tool with native support for containers"

"Unified Cloud Security: Accelerate secure innovation and protect your entire development lifecycle from code to cloud and back."