Explore the cutting-edge field of digital forensics in cloud environments through this 31-minute conference talk by Daniel Simionato and Javier Martinez from Sysdig. Delve into the innovative use of container checkpointing for forensic investigations in complex, ephemeral container ecosystems like Kubernetes. Understand the growing importance of container forensics in DevSecOps and learn how checkpoint and restore features enable investigators to capture and analyze forensic snapshots of running containers. Witness a live demonstration on a real Kubernetes cluster showcasing these new investigative techniques, and gain insights into pre- and post-compromise security features essential for protecting cloud workloads in today's rapidly evolving technological landscape.