Falco

All

49 repositories

libs
Public
libsinsp, libscap, the kernel module driver, and the eBPF driver sources
kmod ebpf libsinsp falco-drivers libscap
C
•
Apache License 2.0
•172•259•49•19•Updated Mar 3, 2025Mar 3, 2025
kernel-crawler
Public
A tool to crawl Linux kernel versions
Python
•
Apache License 2.0
•13•17•0•1•Updated Mar 3, 2025Mar 3, 2025
rules
Public
Falco rule repository
Go
•
Apache License 2.0
•71•112•6•2•Updated Mar 3, 2025Mar 3, 2025
evolution
Public
Evolution process of The Falco Project
kubernetes deployment examples k8s adoption falco
Go
•
Apache License 2.0
•43•50•6•1•Updated Mar 3, 2025Mar 3, 2025
test-infra
Public
Falco workflow & testing infrastructure
automation bots ci cd governance prow falco-drivers testing-infrastructure prow-jobs falco-prow
HCL
•
Apache License 2.0
•109•31•3•3•Updated Mar 3, 2025Mar 3, 2025
falcoctl
Public
Administrative tooling for Falco
Go
•
Apache License 2.0
•60•91•4•5•Updated Mar 3, 2025Mar 3, 2025
falco
Public
Cloud Native Runtime Security
kubernetes security containers cncf cloud-native ebpf hacktoberfest falco runtime-security cncf-project
C++
•
Apache License 2.0
•921•7.7k•58•2•Updated Mar 3, 2025Mar 3, 2025
falco-talon
Public
Response Engine for managing threats in your Kubernetes
security falco response-engine kubernetes
Go
•
Apache License 2.0
•13•149•1•2•Updated Feb 28, 2025Feb 28, 2025
kernel-testing
Public
Ansible playbooks to provision firecracker VMs and run Falco kernel tests
ansible kernel tests ebpf ignite falco runtime-security firecracker
Dockerfile
•
Apache License 2.0
•6•11•0•1•Updated Feb 27, 2025Feb 27, 2025
driverkit
Public
Kit for building Falco drivers: kernel modules or eBPF probes
Go
•
Apache License 2.0
•52•65•1•0•Updated Feb 27, 2025Feb 27, 2025
plugin-sdk-cpp
Public
Falco plugins SDK for C++
C++
•
Apache License 2.0
•11•3•0•1•Updated Feb 27, 2025Feb 27, 2025
event-generator
Public
Generate a variety of suspect actions that are detected by Falco rulesets
go security syscall security-testing kubernetes-auditing
Go
•
Apache License 2.0
•42•101•2•0•Updated Feb 26, 2025Feb 26, 2025
cncf-green-review-testing
Public
Falco configurations intended for testing with the CNCF Green Reviews Working Group
Apache License 2.0
•3•3•0•0•Updated Feb 26, 2025Feb 26, 2025
plugins
Public
Falco plugins registry
plugin registry falco falco-plugins
Go
•
Apache License 2.0
•82•87•7•3•Updated Feb 25, 2025Feb 25, 2025
falco-website
Public
Source code of the official Falco website
security documentation containers cncf hacktoberfest
HTML
•
Creative Commons Attribution 4.0 International
•227•37•9•6•Updated Feb 24, 2025Feb 24, 2025
falcosidekick
Public
Connect Falco to your ecosystem
docker kubernetes security hacktoberfest falco falco-event response-engine
Go
•
Apache License 2.0
•185•572•6•3•Updated Feb 24, 2025Feb 24, 2025
dbg-go
Public
A go tool to work with falcosecurity drivers build grid
Go
•
Apache License 2.0
•1•2•1•0•Updated Feb 24, 2025Feb 24, 2025
syscalls-bumper
Public
A tool to automatically update supported syscalls in libs
Go
•
Apache License 2.0
•5•5•0•0•Updated Feb 24, 2025Feb 24, 2025
plugin-sdk-go
Public
Falco plugins SDK for Go
go sdk falco-plugins
Go
•
Apache License 2.0
•17•26•4•1•Updated Feb 24, 2025Feb 24, 2025
charts
Public
Community managed Helm charts for running Falco with Kubernetes
Go
•
Apache License 2.0
•303•253•6•3•Updated Feb 21, 2025Feb 21, 2025
community
Public
The Falco Project Community
community office-hours cncf-falco falco-community
Apache License 2.0
•21•54•0•1•Updated Feb 20, 2025Feb 20, 2025
testing
Public
All-purpose test suite for Falco and its ecosystem
Go
•
Apache License 2.0
•11•14•3•1•Updated Feb 18, 2025Feb 18, 2025
falco-actions
Public
Run Falco in a GitHub Actions to detect suspicious behavior in your CI/CD
Python
•
Apache License 2.0
•5•8•0•0•Updated Feb 17, 2025Feb 17, 2025
deploy-kubernetes
Public
Kubernetes deployment resources for Falco
k8s manifests falco k8s-deployment falcosidekick k8s-manifests falco-exporter
Apache License 2.0
•16•14•0•0•Updated Feb 17, 2025Feb 17, 2025
falcosidekick-ui
Public
A simple WebUI with latest events from Falco
Vue
•
Apache License 2.0
•16•117•3•0•Updated Feb 16, 2025Feb 16, 2025
falco-rustlings
Public
Small exercises to get you used to writing Falco plugins in Rust 🦀
Rust
•
Apache License 2.0
•1•5•0•1•Updated Jan 16, 2025Jan 16, 2025
falco-aws-terraform
Public
Terraform Module for Falco AWS Resources
HCL
•
Apache License 2.0
•6•6•0•0•Updated Jan 14, 2025Jan 14, 2025
plugin-sdk-rs
Public
Falco plugins SDK for Rust
Rust
•
Apache License 2.0
•2•7•0•2•Updated Jan 14, 2025Jan 14, 2025
elftoolchain
Public
Local version of https://sourceforge.net/projects/elftoolchain/
C
•
Other
•0•0•0•0•Updated Jan 7, 2025Jan 7, 2025
falco-exporter
Public
Prometheus Metrics Exporter for Falco output events
metrics prometheus prometheus-exporter falco
Go
•
Apache License 2.0
•34•121•0•0•Updated Dec 19, 2024Dec 19, 2024