Falco 101: Runtime Security for Cloud Workloads en

In the ever-changing landscape of cloud environments, security has become increasingly essential and intricate. Enter Falco, a robust open-source runtime security tool. Picture it as a surveillance camera for your containers and Kubernetes clusters, perpetually observing system activities to identify threats, irregularities, and policy breaches promptly. If you're serious about safeguarding your cloud-native workloads, understanding Falco is essential.

Falco at the Speed of Llama: Your Local AI Sleuth Unleashed en

Cloud threats are evolving at an unprecedented pace, overwhelming security teams with a deluge of alerts. How do you cut through the noise and pinpoint truly relevant threats quickly? This session introduces Falco, the open-source standard for cloud-native runtime security, supercharged by local Large Language Models (LLMs). We'll demonstrate how this powerful open-source duo acts as your 'Local AI Sleuth,' simplifying the understanding of complex security events without needing constant external research or sending sensitive data to third-party AIs. Discover how to accelerate your open-source threat detection capabilities and empower your SOC to focus on what truly matters.

Enhancing Open Source Threat Detection and Cutting Through the Noise Using AI, LLama, Slack, and Weaviate

From YAML to Syscalls: Eliminating Improvisation in Security en es

Security is often treated as a scattered collection of tools, but effective protection requires architectural alignment. In this session, we turn the 4C Model (Cloud, Cluster, Container, Code) into a practical blueprint for securing Kubernetes end-to-end. We will demonstrate how to shift security left with Infrastructure-as-Code scanning using Checkov, analyze container supply-chain risk with Trivy, enforce policy with Kyverno, and detect runtime threats at the syscall level with Falco. By connecting prevention, enforcement, and detection into a cohesive strategy, attendees will leave with a clear, implementable roadmap to secure Kubernetes from CI/CD pipelines to the running kernel.

Security shouldn’t be a guessing game or a scattered collection of tools. This session presents a practical 4C-based framework to align prevention, enforcement, and detection across modern cloud-native environments. Attendees will leave with a clear, structured approach to securing infrastructure, containers, and runtime systems from development pipelines to production.

De YAML a Syscalls: Elimina la Improvisación en Seguridad en es

La seguridad suele abordarse como una colección dispersa de herramientas, cuando en realidad requiere una alineación arquitectónica. En esta sesión, convertimos el Modelo 4C (Cloud, Cluster, Container y Code) en un blueprint práctico para proteger entornos cloud-native de extremo a extremo. Demostraremos cómo integrar seguridad desde el inicio mediante el escaneo de infraestructura como código con Checkov, analizar riesgos en la cadena de suministro de contenedores con Trivy, aplicar políticas con Kyverno y detectar amenazas en tiempo de ejecución a nivel de syscalls con Falco. Al conectar prevención, enforcement y detección en una estrategia coherente, los asistentes obtendrán una hoja de ruta clara y aplicable desde los pipelines de CI/CD hasta los sistemas en producción.

La seguridad no se resuelve acumulando herramientas, sino diseñando una estrategia por capas. Esta sesión ofrece un marco estructurado para proteger la infraestructura, los contenedores y los entornos de ejecución en ecosistemas modernos. Te llevarás una guía práctica para evolucionar hacia una defensa diseñada, no improvisada.