PALM SEC
Services

Security observability

Security data

Detection engineering

Runtime and cluster security

Pentesting and AppSec

AI security

All services →
AboutContact

Engineering

Engineering notes

Architectures, configurations and queries from real builds. Each note says what was tested and on which versions.

2026-08-02 Tested

Tetragon without Kubernetes: process and network events from EC2 to ClickHouse

Run standalone Tetragon on EC2, ship events through Vector to S3, ingest with ClickHouse S3Queue, and hunt a WordPress compromise with a recursive process-tree query.