-
**Describe the bug**
The Falco libs use the `/proc` filesystem to retrieve information about processes when they start up. However, if a thread, during its lifecycle, changes its name using a `prct…
-
We currently have a long list of tech preview integrations that need to be moved to GA. Can we please remove Tech Preview labels for the following integrations:
| Package Directory | Title …
-
/area documentation
**What would you like to be added**:
https://falco.org/docs/reference/rules/supported-events/#syscall-events
Note that, for performance reasons, by default Falco will on…
-
**Motivation**
Ease of use faster implementation
**Feature**
Currently in the falco-modern-bpf host deployment model, it doesn't appear that macros are shared between config files, this would b…
-
After upgrading to falco 0.38.0 some k8s specific fields are not pupulated any more. E.g. k8s.ns.name amd k8s.pod.name.
Enviroment ist k8s 1.28.6 with the following runtime components:
* dock…
-
**Describe the bug**
When I used helm to deploy in the k8s cluster, I found this error and the falco-driver-loader container kept restarting.
`kubectl logs falco-7bgdd -nfalco -c falco-driver-l…
-
Hey there,
Just gave Falco a whirl for the first time. The docs looked neat, which piqued my interest.
Here are some random thoughts I had while exploring it. Feel free to ignore them; they migh…
nojaf updated
5 months ago
-
**Motivation**
The modern eBPF probe is gaining prominence, prompting our decision to adopt it as the [default driver](https://falco.org/docs/roadmap/#drivers). This shift offers significant advant…
-
I'd like to install [Falco](https://falco.org/) into the cluster
But the event logs that it generates should be processed by a light weight SIEM solution.
I have not figured that part out...
…
-
It seems that the embedded version of Falco is currently at [v1.0.0-rc2](https://www.npmjs.com/package/falco-js/v/1.0.0-rc2) which is a ways behind the current release of [v1.4.0](https://github.com/y…