falco

Falco

Cloud-native runtime security.

Falco rules YAML, rule macros, output configs and Kubernetes audit logging rules for runtime detection.

Configuration Recipes3

falcoBashintermediate
Updating Specific Files in a Kubernetes ConfigMap for Falco

Learn how to update a specific file in a Kubernetes ConfigMap for your Falco deployment without affecting other configuration files.

Falco · Security & Compliance
falcoJSONintermediate
Handling Backslashes in JSON Output for jq Parsing

This article discusses how to effectively parse JSON output containing backslashes using jq, particularly in the context of Falco.

Falco · Security & Compliance
falcoBashintermediate
Configuring Falco Docker Container Logging to AWS CloudWatch

This guide explains how to configure logging for the Falco Docker container to send logs to AWS CloudWatch, including troubleshooting tips.

Falco · Security & Compliance