-
**Describe the bug**
On startup, Falco appears to completely hang when using a rule that includes a large list of domains as a condition. Throughout this period, it appears as though Falco is entir…
-
**Describe the bug**
We are getting the error `Syntax error at offset` in our logs. The occurs when any special character of `,.{}[]"':;!@#$%^&*()+=~` is added to the `Search` bar of the `Events`…
ctdfo updated
2 weeks ago
-
**Describe the bug**
The Falco libs use the `/proc` filesystem to retrieve information about processes when they start up. However, if a thread, during its lifecycle, changes its name using a `prct…
-
**Describe the bug**
Hi
We are instaling Falco on one of cluster in 1.27.11-gke.1062004 with container optimized OS for GKE kernel 5.15.146+ and we face regular CrashLoopBackOff of each falco-no-d…
-
**Motivation**
Tracking pending cleanups, refactors or additional features for the Falco internal metrics framework https://falco.org/docs/metrics/
```[tasklist]
### Tasks
```
-
### What happened?
It appears that APIServer watchcache occasionally lost events. We can confirm that this is NOT a stale watchcache issue.
In some 1.27 clusters, we observed that both watchcach…
-
@Andreagit97 opening a dedicated issue to discuss https://github.com/falcosecurity/libs/pull/1433#issuecomment-1807694658
> I saw that in Falco (and I imagine also in other consumers) we use the ge…
-
**Motivation**
In a sync with my detection and response peers, I was discussing how tools like Falco can drop events during periods of high syscall activity and built-in features (like the syscall …
-
**Describe the bug**
make drivers_test
```
/home/yzw/rd/libs/driver/modern_bpf/helpers/extract/extract_from_kernel.h:648:49: error: member reference base type 'struct percpu_counter[4]' is not …
-
Aggregator of all [AWS security events](https://aws.amazon.com/security-hub/).
In an ideal situation, add Falco as a third-party service that can send events to the Security Hub.
https://docs.aws.…