Kubernetes (K8s) Security Monitoring, Hands-On Workshop

12:00PM – 3:00PM AEST

Kubernetes (K8s) Security Monitoring Workshop is a modular, hands-on workshop designed to familiarize participants with how to leverage Splunk to do security monitoring in environments that use Kubernetes container orchestration technology. The workshop first provides users an introduction to the Kubernetes technology, then moves into building familiarity with three different Kubernetes focused data sources in Splunk by reviewing suspicious examples in those data sources. Splunk provided detection content for Kubernetes environments will also be covered. The workshop leverages the popular Boss of the SOC (BOTS) dataset with hands-on exercises that build on one another. Users will come away with a better understanding of how to use Kubernetes focused log data in Splunk to look for security relevant events/incidents and operationalize their security monitoring in Kubernetes environments.