The Official Sysdig Blog
Kubernetes Security Logging with Falco & Fluentd
Kubernetes security logging primarily focuses on orchestrator events. The Kubernetes documentation provides a good starting point for auditing events of the Kubernetes API. Using Sysdig Falco and Fluentd can provide a more…
Kubernetes Security Context, Kubernetes Security Policy and Kubernetes Network Policy – Kubernetes Security Guide (Part 2)
Once you have defined Kubernetes RBAC: users and services credentials and permissions, we can start leveraging Kubernetes orchestration capabilities to configure security at the pod level. In this part, we will learn…
Kubernetes RBAC and TLS certificates – Kubernetes Security Guide (Part 1)
Kubernetes RBAC security context is a fundamental part of your Kubernetes security best practices, as well as rolling out TLS certificates / PKI authentication for connecting to the Kubernetes API server and…
Kubernetes Security Guide
In this Kubernetes security guide we cover the most significant aspects of implementing Kubernetes security best practices. Kubernetes security, like monitoring or building a CI/CD pipeline is becoming a must as a…
5 Changes Containers Bring to PCI Compliance
Containers have been adopted faster than any previous enterprise technology, and for good reasons. They’re portable, provide robust security through isolation, and allow application teams to develop better services faster. However, the…
What is a CrashLoopBackOff? How to Alert, Debug / Troubleshoot and Fix Kubernetes CrashLoopBackOff Events
In this blog we’re going to talk about how to visualize, alert, and debug / troubleshoot a Kubernetes CrashLoopBackOff event. As all veteran Kubernetes users know, Kubernetes CrashLoopBackOff events are a way…
Prometheus Monitoring and Sysdig Monitor: A Technical Comparison
Since Sysdig now offers Prometheus support in addition to our commercial monitoring product Sysdig Monitor, users have been looking for a better understanding of how Prometheus monitoring and Sysdig Monitor compare and…
Detecting Cryptojacking with Sysdig’s Falco
The latest rage amongst attackers appears to be cryptojacking; rather, exploiting a system, and installing cryptocurrency miners to earn money from the exploited host’s CPU power. We’ve talked about these types of…
Getting Started Writing Falco Rules
Sysdig’s Falco is a powerful behavioral activity monitoring tool to detect abnormal behavior in your applications and containers. While it comes with 25 rules for common best practices, you’ll quickly want to…
Sending Kubernetes & Docker events to Elasticsearch and Splunk using Sysdig
In this article we are going to see how to aggregate Kubernetes / Docker events and alerts into a centralized logs system like Elasticsearch and Splunk. Logging engines are a great companion…
