Kubernetes Sleuthing with RepliK8s

No ratings

Presented at 44CON 2025 by

Replik8s is a modern open-source Kubernetes auditing and investigation tool. It is designed to address the common limitations of traditional security tools, which rely on narrow data collection and predefined logic. RepliK8s allows cloning Kubernetes clusters and serving back exact replicas of the original data, as well as conducting analysis through a tool-agnostic query language. This versatility makes it particularly valuable for purple teams, enabling both exploratory investigation and precise identification of misconfigurations and vulnerabilities. During the workshop, you’ll dive into the quirky world of Clojure, master data wrangling with Meander, and wield RepliK8s to claim the title of ultimate Kubernetes sleuth