Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Detection and Blocking with BPF via YAML

44CON Information Security Conference via YouTube

Overview

Explore the power of BPF (Berkeley Packet Filter) for detection and blocking through YAML configuration in this 47-minute conference talk from 44CON Information Security Conference. Learn how to leverage OSS Tetragon, a mature open-source BPF engine, to monitor and block actions without writing any BPF code. Discover techniques for hooking kernel functions, blocking actions, and killing processes using simple YAML configurations. Gain insights into sending events to logs, email, SMS, and Slack channels for comprehensive monitoring. Presented by Kev Sheldrake, a seasoned security software developer and researcher, this talk offers practical knowledge for implementing advanced security measures using BPF and YAML.

Syllabus

Kev Sheldrake - Detection and Blocking with BPF via YAML

Taught by

44CON Information Security Conference

Reviews

Start your review of Detection and Blocking with BPF via YAML

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.