Kernel-level eBPF observability. Every TCP connect and process exec inside the demo's
containers shows up here, independent of the AI Defense application-layer gates.
Cisco-on-Cisco defense-in-depth: same event, two
observation planes.
0
tcp_connect
0
process_exec
…
status
Live kernel events
Waiting for Tetragon to emit events… Submit a query on the Live demo tab to generate TCP connects