Overview of Cilium’s Tetragon component [1] that enables powerful
realtime, eBPF-based Security Observability and Runtime Enforcement.

The tetragon project is highly configurable and can be used to observe
various parts of linux operating system and enforce security policies.

I'll present its overall design and usage with some examples.

[1] https://github.com/cilium/tetragon