falco
Cloud Native Runtime Securityfalcosidekick
Connect Falco to your ecosystemcharts
Community managed Helm charts for running Falco with Kuberneteslibs
libsinsp, libscap, the kernel module driver, and the eBPF driver sourcesfalco-exporter
Prometheus Metrics Exporter for Falco output eventsfalcosidekick-ui
A simple WebUI with latest events from Falcofalcoctl
Administrative tooling for Falcorules
Falco rule repositoryevent-generator
Generate a variety of suspect actions that are detected by Falco rulesetsplugins
Falco plugins registrypdig
ptrace-based event producer for udigdriverkit
Kit for building Falco drivers: kernel modules or eBPF probesclient-go
Go client and SDK for Falcocommunity
The Falco Project Communityevolution
Evolution process of The Falco Projectfalco-website
Source code of the official Falco websitetest-infra
Falco workflow & testing infrastructureplugin-sdk-go
Falco plugins SDK for Goclient-py
Python client and SDK for Falcofalco-playground
Web-application used to validate Falco rules and test against scap filekernel-crawler
A tool to crawl Linux kernel versionsclient-rs
The rust language implementation of the Falco clientkilt
Kilt is a project that defines how to inject foreign apps into containerstesting
All-purpose test suite for Falco and its ecosystemdeploy-kubernetes
Kubernetes deployment resources for Falcok8s-metacollector
Fetches the metadata from kubernetes API server and dispatches them to Falco instanceskernel-testing
Ansible playbooks to provision firecracker VMs and run Falco kernel testsfalco-aws-terraform
Terraform Module for Falco AWS Resourceslibs-sdk-go
Go SDK for Falco libssyscalls-bumper
A tool to automatically update supported syscalls in libs.github
Default community health filesebpf-probe
eBPF probe for syscall eventskernel-module
pigeon
Secrets and config manager for Falco's infrastructureplugin-sdk-cpp
Falco plugins SDK for C++libsinsp
System inspection librarylibscap
template-repository
Acts as a template for new repositoriesdbg-go
A go tool to work with falcosecurity drivers build gridadvocacy
Advocacy machineryperibolos-syncer
Tool to synchronize Peribolos configuration with GitHub people sources of truth.contrib
Community sandbox to test-drive ideas/projects/codeflycheck-falco-rules
Falco Rules Syntax Checker for Emacs, Using Flycheckcncf-green-review-testing
Falco configurations intended for testing with the CNCF Green Reviews Working GroupLove Open Source and this site? Check out how you can help us