To protect container and Kubernetes workloads choose between the following approaches. Either install traditional Falcon Container Sensor for Linux on each node of your cluster, or set-up Falcon Container Sensor to be deployed as a sidecar to each of your pods.
Note: In Kubernetes clusters where kernel module loading is supported by the worker node OS, we recommend using Falcon sensor for Linux to secure both worker nodes and containers with a single sensor.
- Falcon Sensor for Linux - deploying kernel-mode agent directly to the nodes
- Falcon Container Sensor - setting up cluster to deploy user space agent to each pod
- CrowdStrike Container Security: Product Page
- So You Think Your Containers Are Secure? Four Steps to Ensure a Secure Container Deployment: Blog Post
- Container Security With CrowdStrike: Blog Post
- To learn more about Falcon Container Sensor for Linux: Deployment Guide, Release Notes