#falco

Static image scanning will not catch abnormal behavior at runtime. Combine admission policies (Kyverno) to block non-compliant workloads with runtime monitors (Falco) to detect shell-in-container and lateral movement.

Duy TranMay 8, 20269 min