Files
Anthropic-Cybersecurity-Skills/skills/implementing-runtime-security-with-tetragon/references/api-reference.md
T
mukul975 c21af3347e Complete folder anatomy for all 649 cybersecurity skills + update LICENSE to Mahipal
- Add scripts/agent.py and references/api-reference.md to all remaining skills
- Update all 648 LICENSE files: copyright now reads 'Mahipal'
- Add implementing-security-monitoring-with-datadog (new skill with full anatomy)
- All 649 skills now have: SKILL.md, LICENSE, scripts/agent.py, references/api-reference.md
2026-03-11 00:22:12 +01:00

957 B

API Reference: Cilium Tetragon Runtime Security

TracingPolicy CRD

apiVersion: cilium.io/v1alpha1
kind: TracingPolicy
metadata:
  name: monitor-sensitive-files
spec:
  kprobes:
    - call: fd_install
      args:
        - index: 1
          type: file
      selectors:
        - matchArgs:
            - index: 1
              operator: Prefix
              values: ["/etc/shadow", "/etc/passwd"]

Tetra CLI Commands

Command Description
tetra status Tetragon health
tetra getevents Stream events
tetra tracingpolicy list List policies

Event Types

Type Description
process_exec Process execution
process_exit Process termination
process_kprobe Kernel probe trigger

Key Libraries

Library Use
kubernetes K8s API client
subprocess kubectl/tetra CLI
grpc Tetragon gRPC API