Hacker News Reader

This is basically an advertisement for a product Sysdig offers. The name is mentioned in every other sentence.

Sysdig inspect (which does the Forensics in these examples) is open source. https://github.com/draios/sysdig-inspect

You can do the same rule - based activity detection through Falco which is also open source. https://github.com/draios/falco

Note that both of these open source projects originate from Sysdig as well.

here's another post on the topic that uses strictly open source https://sysdig.com/blog/detecting-cryptojacking-with-sysdigs...