what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Falco 0.18.0

Posted Oct 31, 2019

Authored by Sysdig | Site sysdig.org

Sysdig falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco will notify you when these rules are violated. You can think about falco as a mix between snort, ossec and strace.

Changes: Added support for converting k8s pod security policies (psps) into set of falco rules that can be used to evaluate the conditions specified in the psp. Added flags to disable syscall event source or k8s_audit event source. Various other updates and bug fixes.

tags | tool, intrusion detection

systems | unix

SHA-256 | 19d7c7abbfac4c6fde1221a583df9546772368078433af5e6b111ad18b30aabb

Download | Favorite | View

Related Files

No related files