Cilium’s new Tetragon component enables powerful realtime, eBPF-based Security Observability and Runtime Enforcement. Tetragon detects and is able to react to security-significant events, such as: - Process execution events - System call activity - I/O activity including network & file access When used in a Kubernetes environment, Tetragon is Kubernetes-aware - that is, it understands Kubernetes identities such as namespaces, pods and so-on - so that security event detection can be configured in relation to individual workloads. This package contains the tool tetra CLI.
sudo apt install tetragon (50.70 MB)
Dependências: bpftool, libc6
Escolha um comando ao lado para ver a descrição e a ajuda completa.
tetra
root@kali:~# tetra -h
Tetragon CLI
Usage:
tetra [flags]
tetra [command]
Available Commands:
bugtool Produce a tar archive with debug information
completion Generate the autocompletion script for the specified shell
cri connect to CRI
eventlog Manage event exporter logging parameters
explain List the fields for supported resources
getevents Print events
help Help about any command
info Retrieve information from the server
loglevel Get and dynamically change the log level
policytest Tetragon policy tests
probe Probe for eBPF system features availability
status Print health status
tracingpolicy Manage tracing policies
version Print version from CLI and server
Flags:
-d, --debug Enable debug messages
-h, --help help for tetra
--max-recv-size int Maximum gRPC message size in bytes the client can receive (default 10485760)
--retries int Connection retries with exponential backoff (default 1)
--server-address string gRPC server address
--timeout duration Connection timeout (default 30s)
Use "tetra [command] --help" for more information about a command.