falcosecurity/falco

This is stars and forks stats for /falcosecurity/falco repository. As of 02 May, 2024 this repository has 6352 stars and 829 forks.

Falco Falco is a cloud native runtime security tool for Linux operating systems. It is designed to detect and alert on abnormal behavior and potential security threats in real-time. At its core, Falco is a kernel monitoring and detection agent that observes events, such as syscalls, based on custom rules. Falco can enhance these events by integrating metadata from the container runtime and Kubernetes. The collected events can be analyzed off-host in SIEM or data lake systems. Falco, originally...