Two experimental runs on a 4-node Kubernetes cluster (Kubernetes 1.35.4, Proxmox VMs, Intel Core i7-8700, 32 GB RAM) running the Online Boutique microservices application (11 services). Kernel events collected with Tracee 0.24 (21 event types). Traffic generated by Locust 2.43.
Two traffic profiles:
Seasonal (seasonal/) — diurnal load cycle, 20–200 virtual… See the full description on the dataset page:
https://huggingface.co/datasets/jniecko/ebpf-k8s-attack-detection.