Content:

The main objective of this course is to empower you to find what matters fast. From understanding the basic 8 attack classes to fighting alert-fatigue with anomalies and automating as much as possible

- Container Primitives DeepDive: security starts here
- Building Container Images: how to measure true quality
- Break Down the Attack Classes of containerized systems on Linux:
... - Container Escapes
... - Volumes
... - Capabilities
... - Sockets
... - Roles and Identities
... - Token Impersonation
... - Misc
- Different approaches to effective threat modelling
- Zero Days and the power of anomaly detection
- Making Network policies secure-by-default
- How to keep all your rules uptodate
- Control Loop Decoupling and Breach Containment
- EU CRA: I have 24 hrs to detect a Breach -> how to achieve this?
- Making threats observable:
... - Find vulnerable libraries
... - Block vulnerable code from executing
... - How to inspect the memory
... - How to introspect SSL traffic
... - How to identify data exfiltration
- Forensic Storage vs PII compliance: what to avoid
- Audit yourself: continuous hardening via automation
- Optional: Identity federation, Linux Security Modules, "CVE of the day"

The concepts you will learn apply across most container based system running on Linux and are cloud agnostic. Some highlighted CVEs may affect only certain providers.
Kernel knowledge is NOT required, solid Linux knowledge is required.

The entire course is hosted in live hands-on labs: get a taste right now https://labs.iximiuz.com/courses/discoverebpf-0d7c6c54

Disclaimer: The actual course content may vary from the above, depending on the trainer, implementation, duration and constellation of participants.

Whether we call it training, course, workshop or seminar, we want to pick up participants at their point and equip them with the necessary practical knowledge so that they can apply the technology directly after the training and deepen it independently.