Getting Started with Sysdig Secure
Get Started Page (Free Tier)
Users who choose Sysdig Secure for cloud's Free Tier option can quickly connect a single cloud account/region with Sysdig Secure CSMP, threat detection, and image/registry scanning functions, usinghttps://sysdig.com/company/start-free/ .
Once connected, the Get Started page shows a subset of the options available in the 30-day trial or Enterprise page.
Free Tier Entries
What do I get with Free Tier?
Cloud Security Posture Management and Compliance using AWS CIS Benchmmarks
Out-of-the-box CloudTrail threat detections
Fargate/ECR image scanning for up to 250 scans per month
Connect Your Cloud Account
Here you can easily launch a CloudFormation template to connect an AWS account to Sysdig Secure. Be sure to deploy in the AWS account and region you want to secure.
Integrate Scanning into your CI/CD Pipeline
By analyzing images locally on the CI/CD worker nodes, the Sysdig Secure inline scanner provides the following key benefits:
The ability to shift security left by scanning images before they are pushed to the registries
The ability to parallelize and distribute scanning workloads
No need to share credentials with Sysdig’s SaaS service or send images to the Sysdig backend to be analyzed.
Invite Your Team
Invite someone in your team to use this Sysdig Secure account. They will receive an email and a user will be created for them. They are automatically assigned to Advanced User role.
Get Started Page (Trial or Enterprise)
The Get Started page targets the key steps to ensure users are getting the most value out of Sysdig Secure. The page is updated with new steps as users complete tasks and as Sysdig adds new features to the product.
The Get Started page also serves as a linking page for
Documentation
Release Notes
The Sysdig Blog
Self Paced Training
Support
Users can access the Get Started page at any time by clicking the rocketship in the side menu.
Connect Your Data Sources
Connect Your Cloud Account
Here you can easily launch a CloudFormation template to connect an AWS account to Sysdig Secure. Be sure to deploy in the AWS account and region you want to secure.
Install the Agent
Installing the agent on your infrastructure allows Sysdig to collect data for monitoring and security purposes. See also Quick Install Sysdig Agent on Kubernetes.
Integrate with the Kubernetes Audit Log
The Kubernetes Audit log provides a security-relevant chronological set of records documenting the Kubernetes API activity. By parsing the Kubernetes Audit log we can track user activity, sensitive modifications, and permissions updates. Processing and auditing API logs is key to tracking indicators of compromise within Kubernetes environments, as well as meeting compliance controls.
Invite Your Team
Invite someone in your team to use this Sysdig Secure account. They will receive an email and a user will be created for them. They are automatically assigned to Advanced User role.
Secure Your Pipeline
Scan an Image
Trigger an image scan, based on whatever image scanning options you've enabled.
Set up and Link a Notification Channel
Sysdig Secure will emit alerts to get proactive notification of events, anomalies, or any security incident that requires attention. The alerting system provides out-of-the-box push gateways for regular email, Slack, Cloud-provider notification queues, and custom webhooks, among others.
Set up a Repository Scanning Alert
By integrating scan results with any of the notification channels provided by Sysdig, users can swiftly receive actionable updates reporting on the output of the image analysis process. Repository alerts can then be customized using different trigger conditions depending on the registry/repo scope.
Secure Your Runtime Environment
Set up a Runtime Scanning Alert
One of the most actionable alerts a user can set up is to detect if an existing runtime image is impacted by newly discovered vulnerabilities. These alerts can be scoped using container and Kubernetes metadata so the right teams are notified as soon as the image falls out of compliance.
Create a Detection Rule
Sysdig Secure detects and responds to anomalous runtime activity by leveraging its behavioral detection engine, which is built on top of the open-source project, Falco. Additionally, users can easily create whitelist-based security rules for process execution, file access, and network activity using the basic policy engine.