Aktuelle Falco_rules.yaml --> https://github.com/falcosecurity/rules/blob/main/rules/falco_rules.yaml

Event Generator: docker run -it --rm falcosecurity/event-generator run syscall --loop