Talk Intermediate

Dead Container Walking: Post-Incident Analysis When Your Workload Is Already Gone

Rejected

Session Description

In Kubernetes, compromised containers often disappear before investigators can respond, leaving no disk, process state or live system to inspect.

This talk explores how attackers exploit ephemeral workloads and why traditional forensic approaches fail in cloud-native environments.

Attendees will leave with a blueprint for building forensically ready clusters where even the most ephemeral workloads leave a permanent mark

References

https://docs.google.com/presentation/d/1U9tYXA_fNxX6mrWUP60d-zn3cVDcWzZbE-ZvI0Zchdw/edit?usp=drive_link

Session Categories

Technology architecture

Engineering practice - productivity, debugging

Speakers

Saurabh Mishra Lead DevOps Consultant | Optum

Saurabh Mishra is a Cloud Evangelist with a deep passion for cloud architecture, DevOps, and automation. Saurabh actively engages with the global tech community, sharing insights on cloud-native technologies, security best practices, and multi-cloud strategies.As an experienced speaker and mentor, Saurabh has delivered sessions at conferences, meetups, and workshops, helping teams accelerate their cloud adoption, modernization, and optimization journeys.

https://www.linkedin.com/in/connectsaurabhmishra/