Project Trinidad detects zero-day attacks by applying Machine Learning to layer 7 East-West traffic in modern applications, leveraging eBPF to passively collect traffic in kernel. Studies show that API communication between deployed microservices is highly regular. Project Trinidad leverages machine learning models to understand normal application behavior through observing East-West API traffic, and detects anomalies that are symptomatic of threats and attack.