darktrace/containersensor repository overview

⁠Quick reference

• Documentation: Github⁠

• Where to file issues: Issues⁠

⁠About Darktrace

Darktrace is a global leader in cybersecurity AI, delivering complete AI-powered solutions in its mission to free the world of cyber disruption. We protect more than 7,400 customers from the world’s most complex threats, including ransomware, cloud, and SaaS attacks. With groundbreaking Self-Learning AI, Darktrace empowers bespoke solutions unique to each customer based on continuous visibility into an organization’s entire digital ecosystem.

https://www.darktrace.com/⁠

⁠What is the Darktrace container sensor?

Darktrace's container sensor is a lightweight, stateless application designed to integrate with containerized environments and feed tracking information into the Darktrace ecosystem. This significantly enhances the capabilities of Darktrace DETECT and RESPOND by allowing dynamic workloads to be modelled as a group according to the task they are performing. Examples of these might include cronjobs which run periodically, horizontally scaling services which change over time, or even static groups of containers which rarely change but should be modelled as a single entity.

This service integrates with Kubernetes environments and on-premise environments are supported in the same way as third-party hosted environments like Amazon EKS, Google GKE, and Microsoft AKS.