BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//conference.wireshark.org//sharkfest-24-us//talk//8HHHRQ
BEGIN:VTIMEZONE
TZID:EST
BEGIN:STANDARD
DTSTART:20001029T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10;UNTIL=20061029T070000Z
TZNAME:EST
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
END:STANDARD
BEGIN:STANDARD
DTSTART:20071104T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=11
TZNAME:EST
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000402T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=4;UNTIL=20060402T080000Z
TZNAME:EDT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
END:DAYLIGHT
BEGIN:DAYLIGHT
DTSTART:20070311T030000
RRULE:FREQ=YEARLY;BYDAY=2SU;BYMONTH=3
TZNAME:EDT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-sharkfest-24-us-8HHHRQ@conference.wireshark.org
DTSTART;TZID=EST:20240619T170000
DTEND;TZID=EST:20240619T180000
DESCRIPTION:In Kubernetes\, the management and analysis of network traffic 
 is complicated by the transient nature of containers and the complex archi
 tecture of Kubernetes elements such as pods\, deployments\, and services. 
 Traditional tools like Wireshark\, while robust\, often fail to effectivel
 y navigate these intricacies\, capturing excessive and irrelevant data tha
 t we call "noise."\n\nIn this presentation\, we will explore how Falco\, a
  cloud-native detection engine\, integrated with Falco Talon\, a specialis
 ed response engine designed for the open-source Falco community\, can stre
 amline this process. \n\nWe'll show how this open-source proof-of-concept 
 enables the automatic initiation of tshark captures directly in response t
 o security alerts triggered by Falco in environments like containers and K
 ubernetes\, which typically do not support interactive GUIs.
DTSTAMP:20260413T054130Z
LOCATION:Great Falls
SUMMARY:An API-Driven approach to automating packet captures in cloud-nativ
 e systems - Nigel Douglas
URL:https://conference.wireshark.org/sharkfest-24-us/talk/8HHHRQ/
END:VEVENT
END:VCALENDAR