Viewing profile — rst13

Thanks for the detailed reply! I see custom policy/assertions on kernel behavior as powerful. As a current osquery user managing a fleet of 10k+ hosts (mostly Linux boxes) I find t…

Intrigued by your "real-time kernel-level enforcement" (like freezing suspicious processes). Sounds powerful, but also risky—how do you prevent false positives from bringing down l…

Thanks for the detailed reply! The arch and perf gains sound compelling. It might be a bit early for benchmarks, but I'd be curious to see how argus compares vis-à-vis other ebpf-b…

Interesting take. I’ve been looking a lot into hardening build clusters for our dev teams. We’re a k8s shop and use a mix of egress controls, host isolation, and Falco for detectio…

Unfortunately this is something large corps like AWS have been getting away with for a while now. Releasing half-baked product clones as GA when in fact they're still clunky and ar…

I wonder how Netlify is doing in comparison

Great tool! Having used wireshark for ages, its refreshing to visualize binaries like this

I've been using Garnet with my k8s setup. They don't have native kube api integration and I suggest developing a controller. But right now you can use the CLI to append any command…

Having struggled with the complexity of Vault in the past, this seems to offer a great alternative. Curious if Garnet handles secret rotations?

This is sick