Resources

Additional resources to learn about Tetragon

Conference talks

TitleAuthorsConferenceDate
From Kernel To Kubernetes: Mapping eBPF-Detected Processes To PodsYuki NakamuraKubecon JP2025
What Agent to Trust with Your K8s: Falco, Tetragon or KubeArmor?Henrik RexedKubecon NA2024
eBPF-based, Kubernetes-native: observability & security with TetragonAnna KapuścińskaTechSpot2024
Past, Present, Future of Tetragon- First Production Use Cases, Lessons Learnt, Where Are We Heading?John Fastabend & NatÃĄlia RÃĐka IvÃĄnkÃģKubeCon EU2023
eBPF and Kubernetes — Better Together! Observability and Security with TetragonAnna Kapuścińska & James LaverackKubernetes Community Days UK2023
The Next Log4jshell?! Preparing for CVEs with eBPF!John Fastabend & NatÃĄlia RÃĐka IvÃĄnkÃģKubeCon EU2023
Tutorial: Getting Familiar with Security Observability Using eBPF & Cilium TetragonDuffie Cooley & RaphaÃŦl PinsonKubeCon EU2023
Securing the Superpowers: Who Loaded That eBPF Program?John Fastabend & NatÃĄlia RÃĐka IvÃĄnkÃģCloud Native SecurityCon NA2023
Container Security and Runtime Enforcement with TetragonDjalal HarounieBPF Summit2022
You and Your Security Profiles; Generating Security Policies with the Help of eBPFJohn Fastabend & NatÃĄlia RÃĐka IvÃĄnkÃģeBPF Day North America2022
eBPF for Runtime SecurityLiz RiceContainerDays2022
Real Time Security - eBPF for Preventing attacksLiz RiceCloud Native SecurityCon EU2022
Keeping your cluster safe from attacks with eBPFJed Salazar & NatÃĄlia RÃĐka IvÃĄnkÃģeBPF Summit2021
Uncovering a Sophisticated Kubernetes Attack in Real Time Part II.Jed Salazar & NatÃĄlia RÃĐka IvÃĄnkÃģO'Reilly Superstream Series, Infrastructure & Ops2021
Uncovering a Sophisticated Kubernetes Attack in Real-TimeJed Salazar & NatÃĄlia RÃĐka IvÃĄnkÃģKubeCon EU2020

Book

Security Observability with eBPF - Jed Salazar & NatÃĄlia RÃĐka IvÃĄnkÃģ, OReilly, 2022

Blog posts

Tetragon 1.0: Kubernetes Security Observability & Runtime Enforcement with eBPF - Thomas Graf, 2023

Tutorial: Setting Up a Cybersecurity Honeypot with Tetragon to Trigger Canary Tokens - Dean Lewis, 2023

Can I use Tetragon without Cilium? - Dean Lewis, 2023

Detecting a Container Escape with Cilium and eBPF - NatÃĄlia RÃĐka IvÃĄnkÃģ, 2021

Detecting and Blocking log4shell with Isovalent Cilium Enterprise - Jed Salazar, 2021

Hands-on lab

Getting Started with Tetragon - NatÃĄlia RÃĐka IvÃĄnkÃģ, Roland Wolters, RaphaÃŦl Pinson

Exploring Tetragon - A Security Observability Tool for Kubernetes, Docker, and Linux - Ivan Velichko

Video Tutorials

eBPF for Runtime Enforcement | Tetragon Introduction and Overview - Rawkode Academy

Restrict Access to Secure Files with Tetragon | eBPF Runtime Enforcement - Rawkode Academy

Last modified March 20, 2025: refactor: move video data to data folder, add default cover (a682a3e9d)