Daniel Céspedes

Run Atomic Red Team tests, then step into the Blue Team role to detect threats and create custom Falco detection rules in this hands‑on 90‑minute keyboard workshop.

Stay Ahead of Evolving Threats with Falco

This 90-minute workshop, is perfect for anyone looking to deepen their expertise in Kubernetes and cloud-native security. Whether you’re new to the field or an experienced Kubernetes threat detection engineer, you’ll learn how to leverage Falco to craft detection rules that extend MITRE ATT&CK® coverage.

By the end of the session, you’ll have a clear understanding of managing threat detection in Kubernetes and the challenges of validating complex rule sets.

What can you expect from attending?
- Strengthen Security Posture: Create custom Falco rules to address the MITRE ATT&CK® framework using Atomic Red Team
- Real-Time Threat Detection: Learn to operationalize rules aligned with frameworks such as MITRE, NIST, HIPAA, and SOC 2—reducing noise and false positives
- Automated Defense: Automate Falco updates with expanded threat intelligence using falcoctl, seamlessly integrating with your cloud-native setup
- Falco Feeds by Sysdig: Enhance open-source Falco with automated, continuously updated security rules from Sysdig’s Threat Research Team