THREATOPS
THREAT OPS › Threat News › Kubernetes forensics 1/3: what the container ?

Kubernetes forensics 1/3: what the container ?

lowsynacktiv

In 2025, Synacktiv CSIRT observed a significant rise in attacks and compromises targeting Kubernetes environments. The consensus is that these attacks are bound to keep expanding as much as the technology itself. To better understand how a Kubernetes cluster works and how to investigate one during a security incident, we decided to work on a series of articles about Kubernetes forensics. This one

Original source: https://www.synacktiv.com/en/publications/kubernetes-forensics-13-what-the-container.html