the ps utility, with an eBPF twist and container context

Small exercises to get you used to writing Falco plugins in Rust 🦀

Falco proc tree diagnostic plugin

Myself :)

Fetches the metadata from kubernetes API server and dispatches them to Falco instances

Falco rule repository

A crawler for kernel releases distributed by the major Linux distributions.

Unofficial Falco plugin SDK for .NET

libsinsp, libscap, the kernel module driver, and the eBPF driver sources

Patches needed to build VMware (Player and Workstation) host modules against recent kernels

Cloud Native Runtime Security

Linux system exploration and troubleshooting tool with first class support for containers

Administrative tooling for Falco

A script for checking if Falco drivers are available for your system