Usage example of new OpenFaaS output type of Falcosidekick

Managed app for the host-based intrusion detection agent Falco.

A simple demo about how to set up Kubernetes Respons Engine on GKE by using Google Cloud Functions, Falco and Falcosidekick

Receive and analyze Syslog events with Falco

A Falco plugin to track Bitcoin transactions in real time

A Falco Plugin that receives Keycloak user/admin events.

A Falco Plugin for Rekor Transparency Log Server

Proof Of Concept about adding hot-reloading support to Falco using sidecar container concept in Kubernetes environment

Configuration files used in the demo for the talk "Prometheus + Falco: The Swiss Army Knife for SREs"

Experimenting to implement Kubernetes Response Engine based on Event-Driven Workflow using Argo Events and Argo Workflows

Kilt is a project that defines how to inject foreign apps into containers

SysFlow edge processing pipeline

Fetches the metadata from kubernetes API server and dispatches them to Falco instances

Automated build and mirror of eBPF kernel probes for use as a driver with the Falco runtime security agent (https://falco.org/)

Demonstrating how you can take an action to your intrusions detected by Falco using OpenFaaS functions

Evolution process of The Falco Project

Go client and SDK for Falco

AI-generated remediations for Falco audit events

Falco plugins registry

Prometheus Metrics Exporter for Falco output events