Digital Forensics with Container Checkpointing - Daniel Simionato & Javier Martinez, Sysdig
Channel: The Linux Foundation
Date: 2023-10-04

Digital Forensics with Container Checkpointing - Daniel Simionato & Javier Martinez, Sysdig

The ever increasing adoption of cloud technologies and their complexity is putting pressure on DevSecOps to protect their workloads natively by providing users with pre- and post-compromise security features. Container checkpointing has opened the door to a variety of new investigative approaches and possibilities in the field of Digital Forensics. These new checkpoint and restore features allow investigators to capture a forensic snapshot of a running container, saving the state of the container with the possibility of restoring it later for further analysis. These features are crucial in a rapidly changing environment with ephemeral containers like Kubernetes. In this session, Daniel and Javier will: - Explain the importance of Container Forensics. - Illustrate the container checkpointing and restore features. - Showcase these new features with a live demo on a real Kubernetes cluster.