CSI Forensics - Unraveling Kubernetes Crime Scenes

Dive into an insightful conference talk exploring advanced Digital Forensics and Incident Response (DFIR) techniques for Kubernetes environments. Learn how to effectively mitigate security breaches in container-based systems through cutting-edge practices. Discover the complexities of applying DFIR processes in containerized setups and gain valuable knowledge on checkpoint creation for compromised applications, restoration in sandboxed environments, and memory forensics using traditional open-source DFIR tools. Understand the advantages and disadvantages of the latest DFIR capabilities, equipping yourself with essential skills to navigate and resolve Kubernetes crime scenes.