Packages and Binaries:

tetragon

Cilium’s new Tetragon component enables powerful realtime, eBPF-based Security Observability and Runtime Enforcement.

Tetragon detects and is able to react to security-significant events, such as: - Process execution events - System call activity - I/O activity including network & file access

When used in a Kubernetes environment, Tetragon is Kubernetes-aware - that is, it understands Kubernetes identities such as namespaces, pods and so-on - so that security event detection can be configured in relation to individual workloads.

This package contains the tool tetra CLI.

Installed size: 66.98 MB
How to install: sudo apt install tetragon

tetra

root@kali:~# tetra -h
Tetragon CLI

Usage:
  tetra [flags]
  tetra [command]

Available Commands:
  bugtool         Produce a tar archive with debug information
  completion      Generate the autocompletion script for the specified shell
  cri             connect to CRI
  getevents       Print events
  help            Help about any command
  loglevel        Get and dynamically change the log level
  probe           Probe for eBPF system features availability
  stacktrace-tree Manage stacktrace trees
  status          Print health status
  tracingpolicy   Manage tracing policies
  version         Print version from CLI and server

Flags:
  -d, --debug                   Enable debug messages
  -h, --help                    help for tetra
      --retries int             Connection retries with exponential backoff
      --server-address string   gRPC server address
      --timeout duration        Connection timeout (default 10s)

Use "tetra [command] --help" for more information about a command.