Understanding eBPF and how can be used to analyze the container activity in runtime to collected events to detect suspicious behavioral patterns. We will explore this powerful tool with demos.