TLDR InfoSec · STRATEGIES & TACTICS
REAL TIME THREAT DETECTION FOR KUBERNETES WITH ATOMIC RED TESTS & FALCO
Summary from the TLDR InfoSec newsletter
A post on using Atomic Red Tests to test Falco detection in Kubernetes. The post first walks through deploying Atomic Red Tests and Falco in a Kubernetes cluster. It then walks through running tests, monitoring for detections, and adding custom Falco rules for missed events.