Kubernetes Threat and Attack Detection by Pearson
2h 46mIntermediate2026-02-25
Authors

Pearson
Course details
Are you a Kubernetes practitioner who wants to know how to proactively protect clusters against security threats? In this course, expert systems engineer Chris Jackson guides you through robust strategies for detecting, analyzing, and responding to malicious activities and potential security breaches. Explore critical topics such as enforcing container immutability, leveraging Kubernetes audit logs for real-time monitoring, and employing advanced threat detection tools like Falco. Learn how to use the MITRE ATT&CK framework to effectively investigate and identify signs of compromise. Watch hands-on demonstrations to gain actionable insights and become more equipped to maintain secure, resilient Kubernetes infrastructures. Discover advanced techniques you can use to confidently tackle real-world Kubernetes security challenges, enhancing your skills in threat detection and security management.
Concepts
Introduction
- Kubernetes threat and attack detection - Introduction
Ensure Immutability of Containers at Runtime
- Learning objectives
- Understanding immutability
- Read only filesystem
- Policy enforcement with VAP
Use Kubernetes Audit Logs to Monitor Access
- Learning objectives
- Auditing in Kubernetes
- Define an audit policy
- Event batching and tuning
- Configure backend log storage
Detect Malicious Activity, Threats, and Attacks
- Learning objectives
- Understanding syscall behavioral analysis
- Using Falco for threat detection
- Falco host installation
- Falco Kubernetes installation
- Falco configuration and rules
- Falco custom rules in action
Investigate and Identify Signs of Compromise
- Learning objectives
- MITRE ATT&CK framework
- Security event log review
- Gathering evidence of compromise
- Practicing Kubernetes security
Summary
- Kubernetes threat and attack detection - Summary
Related courses
- DevOps Foundations: Going Cloud Native
- Learning Kubernetes
- Kubernetes: GitOps with ArgoCD
- Deploying Scalable Machine Learning for Data Science
- Cloud-Native Development Using Java with Eclipse MicroProfile (2019)
- Kubernetes: Infrastructure as Code with Pulumi
- Kubernetes: Native Tools (2018)
- Kubernetes: Microservices (2018)
Related learn paths
- Become an IT Security Specialist
- Getting Started with DevOps
- Getting Started with Kubernetes
- Containerize Applications with Docker
- Developing and Delivering Software with Docker
- MLOps Essentials for Developers and AI Engineers: Tools, Pipelines, Security
- Infrastructure as Code with Terraform
- Prepare for the Microsoft Azure Administrator (AZ-104) Exam