From 32d408275ba515b6c711c289c9a389cd0042782e Mon Sep 17 00:00:00 2001 From: Owen Garrett Date: Mon, 6 Jun 2022 07:07:57 -0700 Subject: [PATCH 1/2] Update additional-tools.md Add PacketStreamer open source packet capture --- docker-and-k8s-security/docker/additional-tools.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docker-and-k8s-security/docker/additional-tools.md b/docker-and-k8s-security/docker/additional-tools.md index 2e9062b..7fe774b 100644 --- a/docker-and-k8s-security/docker/additional-tools.md +++ b/docker-and-k8s-security/docker/additional-tools.md @@ -14,6 +14,7 @@ - [docker-lock](https://github.com/safe-waters/docker-lock) - A cli-plugin for docker to automatically manage image digests by tracking them in a separate Lockfile. By [@safe-waters][safe-waters] - [notary](https://github.com/theupdateframework/notary) - a server and a client for running and interacting with trusted collections. - [oscap-docker](https://github.com/OpenSCAP/openscap) - OpenSCAP provides oscap-docker tool which is used to scan Docker containers and images. By [OpenSCAP](https://github.com/OpenSCAP) +- [PacketStreamer](https://github.com/deepfence/PacketStreamer) - distributed packet capture and aggregation, supporting Docker, Kubernetes, and VMs / bare hosts. By [Deepfence](https://deepfence.io) - [Phonito Security](https://phonito.io/?b=b) :heavy_dollar_sign: - a Docker vulnerability scanner with constant Kubernetes monitoring and pipeline integration. - [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud) :heavy_dollar_sign: - (previously Twistlock Security Suite) detects vulnerabilities, hardens container images, and enforces security policies across the lifecycle of applications. - [Sysdig Falco](https://github.com/falcosecurity/falco) - Sysdig Falco is an open source container security monitor. It can monitor application, container, host, and network activity and alert on unauthorized activity. From e9ce35dada78e51da31a46296e0380a1d74c7fe3 Mon Sep 17 00:00:00 2001 From: Owen Garrett Date: Mon, 6 Jun 2022 07:09:53 -0700 Subject: [PATCH 2/2] Update README.md Add PacketStreamer open source packet capture --- docker-and-k8s-security/kubernetes/README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docker-and-k8s-security/kubernetes/README.md b/docker-and-k8s-security/kubernetes/README.md index 0ec2134..ecb3d97 100644 --- a/docker-and-k8s-security/kubernetes/README.md +++ b/docker-and-k8s-security/kubernetes/README.md @@ -128,6 +128,7 @@ - [CIS Kubernetes Benchmark - InSpec Profile](https://github.com/dev-sec/cis-kubernetes-benchmark) - [Kube PodSecurityPolicy Advisor](https://github.com/sysdiglabs/kube-psp-advisor) - [Inspektor Gadget](https://github.com/kinvolk/inspektor-gadget) +- [PacketStreamer](https://github.com/deepfence/PacketStreamer) - [Starboard](https://github.com/aquasecurity/starboard) - [Advocacy Site for Kubernetes RBAC](https://github.com/mhausenblas/rbac.dev) - [Helm-Snyk](https://github.com/snyk-labs/helm-snyk)