Linux system exploration and troubleshooting tool with first class support for containers

Cloud Native Runtime Security

libsinsp, libscap, the kernel module driver, and the eBPF driver sources

☁️♮🏛 This repo contains several documents related to the operation of the CNCF. File non-technical issues related to CNCF here.

Falco workflow & testing infrastructure

Falco plugins SDK for C++

Falco plugins registry

The official source for Sysdig’s Helm charts

Rust libary to encode and decode DNS packets

Sysdig Inspect - A powerful opensource interface for container troubleshooting and security investigation

All-purpose test suite for Falco and its ecosystem

🍻 Default formulae for the missing package manager for macOS (or Linux)

Evolution process of The Falco Project

Ansible playbooks to provision firecracker VMs and run Falco kernel tests

Administrative tooling for Falco

Ignite a Firecracker microVM

Source code of the official Falco website

A tool to crawl Linux kernel versions

Kit for building Falco drivers: kernel modules or eBPF probes

RTL8812AU/21AU and RTL8814AU driver with monitor mode and frame injection

Falco plugins SDK for Go

Community managed Helm charts for running Falco with Kubernetes

Generate a variety of suspect actions that are detected by Falco rulesets

Go client and SDK for Falco

Default community health files

Prometheus Metrics Exporter for Falco output events