Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enhanced BPF Session Recording for Kubernetes #50984

Closed
LorikAlija opened this issue Jan 13, 2025 · 0 comments
Closed

Enhanced BPF Session Recording for Kubernetes #50984

LorikAlija opened this issue Jan 13, 2025 · 0 comments
Labels
feature-request Used for new features in Teleport, improvements to current should be #enhancements

Comments

@LorikAlija
Copy link

What would you like Teleport to do?
Introduce Enhanced BPF Session Recording support for Kubernetes.

What problem does this solve?
During an internal review of our Teleport Kubernetes use-case, it was found that users can conceal terminal commands and as such, during testing it was possible to demonstrate a reverse shell command, which was not captured within the session recording.

If a workaround exists, please include it.
A detection control rather than prevention. Setting up internal alerting which generates an alert when it detects certain commands such as a reverse shell/blind command.

@LorikAlija LorikAlija added the feature-request Used for new features in Teleport, improvements to current should be #enhancements label Jan 13, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature-request Used for new features in Teleport, improvements to current should be #enhancements
Projects
None yet
Development

No branches or pull requests

2 participants