Adventures in the Kernel: Using eBPF and Tetragon for runtime visibility - Jeremy Colvin, Isovalent

This talk explores the innovative applications of eBPF programs and Tetragon, highlighting how operating within the kernel can effectively collect, aggregate, and filter security-related data with minimal overhead. The speaker discusses how to link process binary information to the network traffic generated, along with topics such as network health metrics, file monitoring, and compliance attestation in cloud-native environments. Attendees will gain insights into leveraging eBPF for enhanced security and operational efficiency in modern cloud architectures.