Sysdig Stratoshark extends Wireshark's network analysis capabilities into cloud environments by capturing and analyzing system calls and log data. It leverages Falco libraries and plugins to provide deep cloud visibility, enabling users to troubleshoot, secure, and monitor cloud-native systems, including hosts, containers, and processes. Stratoshark supports the analysis of SCAP files generated by capturing system calls directly from the Linux kernel and can ingest cloud audit logs through Falco plugins, such as AWS CloudTrail. The tool offers a graphical user interface familiar to Wireshark users, facilitating the correlation of server and network issues, and bridges the gap between network packet analysis and modern cloud-native security.
