Detection Engineering in Kubernetes Environments - Wrangling Security Data Out of Your Clusters

Explore detection engineering in Kubernetes environments through this informative conference talk. Delve into the various logs and data sources available within Kubernetes clusters and learn how to leverage them for effective security monitoring. Discover the key security aspects to focus on and understand the differences between self-managed and cloud service provider-managed Kubernetes offerings. Gain insights into the engineering process of integrating these logs with SIEM or data lake systems. Learn how to develop your own detection cases based on real-world attack scenarios and industry frameworks like MITRE ATT&CK for Containers. Equip yourself with practical knowledge to enhance security measures and identify potential threats in your Kubernetes deployments.