falcosecurity/falco
View on GitHub ↗ ★ 9,560 C++
Cloud Native Runtime Security
7 mentions on Hacker News by 6 people: 2 stories, 5 comments · first 2016-07-29 · latest 2023-10-19
20082026
-
…to respect that foundation. [1] https://www.brendangregg.com/blog/2023-04-28/ebpf-security-i... [2] https://github.com/falcosecurity/falco/ [3] https:/github.com/cilium/tetragon [4] https://github.com/aquasecurity/tracee [5]…
comment by happy-dude · 2023-10-19 · in Linux runtime security agent powered by eBPF -
https://github.com/falcosecurity/falco Like snort, but looks at system calls.
comment by knoxa2511 · 2023-09-21 · in Cisco Acquires Splunk -
…You can do the same rule - based activity detection through Falco which is also open source. https://github.com/draios/falco Note that both of these open source projects originate from Sysdig as well.
comment by apurvadave · 2018-03-23 · in Detecting crypto script kiddies -
…if you are root) to tamper with this system. For these use cases I would use something like https://github.com/draios/falco to capture all application-level activity.
comment by alexk · 2016-12-29 · in Teleport 1.3 adds support for SSH authentication with U2F keys -
Somewhat related: https://github.com/draios/falco "Sysdig Falco is a behavioral activity monitor designed to detect anomalous activity in your applications. Powered by sysdig’s system call capture infrastructure, falco lets you…
comment by avtar · 2016-07-29 · in Detecting malicious behaviour using system calls