Bypassing Falco - How to Compromise a Cluster without Tripping the SOC
CNCF [Cloud Native Computing Foundation] via YouTube
The Most Addictive Python and SQL Courses
Build the Finance Skills That Lead to Promotions, Not Just Certificates
Overview
Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This talk examines gaps in Falco’s default runtime detection rules and presents nine classes of techniques for bypassing them. It demonstrates the techniques, with a container image and code snippets, against a Kubernetes cluster.
Syllabus
Bypassing Falco: How to Compromise a Cluster without Tripping the SOC - Shay Berkovich, BlackBerry
Taught by
CNCF [Cloud Native Computing Foundation]