Project Lightning Talk: Forensics With Falco - Gerald Combs, Maintainer

This talk focuses on the integration of Falco with forensic analysis tools, particularly Stratoshark. Gerald Combs, the maintainer of Falco, discusses the recent enhancements that enable capture recording, which enhances the visibility into container and system activity. He demonstrates how these tools work together to streamline investigations by analyzing captured event data, while also addressing important considerations for deploying these features safely and efficiently in production environments.