Sysdig Donates Stratoshark to Wireshark Foundation for Cloud Forensics Advancement

Sysdig has donated its open-source cloud forensics tool, Stratoshark, to the Wireshark Foundation in a move aimed at improving cloud-native visibility for the security community, SiliconANGLE reports. Stratoshark was introduced earlier this year to extend Wireshark’s traditional network protocol analysis into the cloud environment, offering a familiar interface for users to inspect cloud-based system calls and logs.

Wireshark has long been a go-to tool for packet-level network analysis, but it wasn’t built for the cloud era. Stratoshark fills that gap by integrating with Sysdig’s Falco open-source ecosystem, enabling runtime detection alongside network traffic capture. The result is a deeper view across both system and network layers, helping teams better understand and investigate cloud-based security events.

Since launch, Stratoshark has expanded its capabilities to support more granular cloud log investigations. It enables detailed forensics around cloud activity—capturing critical context like the origin, action, and timing of events. This complements traditional network traffic analysis and supports a more unified response to cloud security incidents.

The Wireshark Foundation, established in 2023, now takes over stewardship of the tool. With Stratoshark added to its portfolio, the foundation is positioned to extend its open-source mission into cloud forensics, building on Wireshark’s legacy while addressing the demands of modern cloud-native environments.