[Security][8.19] Ingest Tetragon data

[benironside]

Description

In alignment with our FY25 security strategy to integrate third party security data into Elastic, we're expanding our focus to include Tetragon, an eBPF based security observability and runtime enforcement tool for Kubernetes and Linux. As part of the Cilium ecosystem, Tetragon offers deep visibility into system calls, network activity, and process execution in cloud-native environments.

Resources

More details here: https://github.com/elastic/security-team/issues/9981

Which documentation set does this change impact?

Elastic On-Prem and Cloud (all)

Feature differences

What release is this request related to?

8.18

Collaboration model

The documentation team

Point of contact.

Main contact: @nick-alayil

Stakeholders:

[nick-alayil]

We've made significant progress with Tetragon, but it’s still in tech preview and requires more work before it can be considered GA. I’d recommend holding off on documentation efforts until 8.19.

[bmorelli25]

Removing assignment until this is ready for a writer to work on.