Footprint

Security — attacker breadcrumbs, lateral movement, policy violations, and exfil attempts as a visual replay.

Documentation Quickstart

What it does

Follow the exact sequence of a suspicious event across pods, services, VPC, and SaaS paths.

Why it’s different

Fuses Falco/OPA signals into the same trace-plus-flow timeline used by InkDrop.

Get started

ink replay --mode footprint --ink-id atk-123