TLDR InfoSec · STRATEGIES & TACTICS

REAL TIME THREAT DETECTION FOR KUBERNETES WITH ATOMIC RED TESTS & FALCO

blackhillsinfosec.com5 min read

Summary from the TLDR InfoSec newsletter

A post on using Atomic Red Tests to test Falco detection in Kubernetes. The post first walks through deploying Atomic Red Tests and Falco in a Kubernetes cluster. It then walks through running tests, monitoring for detections, and adding custom Falco rules for missed events.