This session delves into the cutting-edge realm of Automatic Threat Response Engines designed specifically for Kubernetes. We will explore how these proactive defense systems are revolutionizing how organizations protect their cloud-native applications from emerging threats. By automating the detection and mitigation process, these engines not only enhance security but also significantly reduce the time and resources required to respond to incidents.

Using Falco, Falco SideKick, and Falco Thalon, we will demonstrate how to properly respond to attacks in near real-time, analyzing data from different sources and taking actions that span your entire environment.