Skip to content
Runbooks

Wiz Sensor Service

Logging

Section titled “Logging”

Summary

Section titled “Summary”

Wiz Runtime Sensor is a small ebpf (Extended Berkeley Packet Filter) agent deployed on every Kubernetes Node, meticulously monitoring system calls to pinpoint suspicious activities. It proactively identifies and alerts on behaviours that look malicious, signalling potential security threats or anomalies. The Wiz Sensor operates by leveraging a set of rules that define which system call sequences and activities are deemed abnormal or indicative of security incidents.